openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File incus.sysctl of Package incus

# WARNING: DO NOT MODIFY THIS FILE.
# Changes to this file will be lost when the incus package is updated or
# removed. Instead, add changes to /etc/sysctl.d/.

# These defaults come from LXD's doc/production-setup.md and
# <https://github.com/zabbly/incus/blob/stable/etc/sysctl.d/50-incus.conf>, but
# have been slightly modified to be less extreme. The recommended value is
# included as a comment below each changed value.

# inotify limits.
fs.inotify.max_queued_events  = 131072 # 1048576
fs.inotify.max_user_instances = 131072 # 1048576
fs.inotify.max_user_watches   = 131072 # 1048576

# Maximum async-io requests.
fs.aio-max-nr = 524288

# Number of memory mappings a process can have (incus can have quite a lot).
#vm.max_map_count = 262144

# Deny container access to kmsg, but this also blocks non-root host users so
# it's disabled by default. This isn't a bad hardening measure in general.
#kernel.dmesg_restrict = 1

net.ipv4.fib_sync_mem = 33554432
# ARP table size (one per container)
net.ipv4.neigh.default.gc_thresh3 = 2048 # 8192
net.ipv6.neigh.default.gc_thresh3 = 2048 # 8192

# Number of kernel keyrings for unprivileged users (one per container).
kernel.keys.maxbytes=2000000
kernel.keys.maxkeys=2000

Places

File incus.sysctl of Package incus

Places