diff options
author | Romain Gonçalves <me@rgoncalves.se> | 2022-12-10 21:17:16 +0100 |
---|---|---|
committer | Romain Gonçalves <me@rgoncalves.se> | 2022-12-12 22:04:27 +0100 |
commit | 7c1f7039170a25f192d87235476179f7cfe01a85 (patch) | |
tree | fc8e77b7176fa730b30b20081e76f2527371e9a3 /roles/_workstation/kernel | |
parent | 21fc0867dc42128434e5c46ca684d9a966184b8a (diff) | |
download | rules-7c1f7039170a25f192d87235476179f7cfe01a85.tar.gz |
chore: explode workstation role in subroles
Diffstat (limited to 'roles/_workstation/kernel')
-rw-r--r-- | roles/_workstation/kernel/defaults/main.yml | 3 | ||||
-rw-r--r-- | roles/_workstation/kernel/tasks/main.yml | 34 |
2 files changed, 37 insertions, 0 deletions
diff --git a/roles/_workstation/kernel/defaults/main.yml b/roles/_workstation/kernel/defaults/main.yml new file mode 100644 index 0000000..6ef2ad2 --- /dev/null +++ b/roles/_workstation/kernel/defaults/main.yml @@ -0,0 +1,3 @@ +--- + +kernel_sysctl_configuration_file: /etc/sysctl.conf diff --git a/roles/_workstation/kernel/tasks/main.yml b/roles/_workstation/kernel/tasks/main.yml new file mode 100644 index 0000000..3dc1e60 --- /dev/null +++ b/roles/_workstation/kernel/tasks/main.yml @@ -0,0 +1,34 @@ +--- + +- name: create sysctl configuration file + ansible.builtin.file: + path: "{{ kernel_sysctl_configuration_file }}" + owner: 0 + group: 0 + mode: 0644 + +- name: apply memory optimizations + ansible.builtin.blockinfile: + path: "{{ kernel_sysctl_configuration_file }}" + block: | + kern.shminfo.shmall=3145728 + kern.shminfo.shmmax=1073741823 + kern.shminfo.shmmni=1024 + kern.shminfo.shmseg=1024 + kern.seminfo.semmns=4096 + kern.seminfo.semmni=1024 + marker_begin: "memory - BEGIN" + marker_end: "memory - END" + +- name: apply process optimizations + ansible.builtin.blockinfile: + path: "{{ kernel_sysctl_configuration_file }}" + block: | + kern.maxfiles=102400 + kern.maxproc=32768 + kern.maxfiles=65535 + kern.bufcachepercent=90 + kern.maxvnodes=262144 + kern.somaxconn=2048 + marker_begin: "process - BEGIN" + marker_end: "process - END" |