github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2025-07-30 14:10:57 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #980 from justincormack/sysctl-rational

Browse Source 
Combine sysctl configs
This commit is contained in:
Justin Cormack 2017-01-10 16:08:15 +00:00 committed by GitHub
commit 495dcf63c5
3 changed files with 11 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
alpine/etc/sysctl.d/01-moby.conf
View File

@ -1,3 +1,4 @@
# general limits
vm.max_map_count = 262144
vm.overcommit_memory = 1
net.core.somaxconn = 1024
@ -7,4 +8,13 @@ net.ipv4.neigh.default.gc_thresh3 = 32768
fs.aio-max-nr = 1048576
fs.inotify.max_user_watches = 524288
fs.file-max = 524288
kernel.random.write_wakeup_threshold = 3072
# for rngd
kernel.random.write_wakeup_threshold = 3072
# security restrictions
kernel.kptr_restrict = 2
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.conf.default.accept_source_route = 0
net.ipv6.conf.all.accept_redirects = 0
net.ipv6.conf.default.accept_redirects = 0
kernel.perf_event_paranoid = 3

6
alpine/etc/sysctl.d/02-lynis.conf
View File

@ -1,6 +0,0 @@
kernel.kptr_restrict = 2
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.conf.default.accept_source_route = 0
net.ipv6.conf.all.accept_redirects = 0
net.ipv6.conf.default.accept_redirects = 0

2
alpine/etc/sysctl.d/03-kspp.conf
View File

@ -1,2 +0,0 @@
kernel.perf_event_paranoid = 3
kernel.yama.ptrace_scope = 1