blob: 2fdfeebb67a7acbcde795a406798d8529573a125 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
{lib, ...}:
with lib; {
boot = {
# I don't use it even on laptops.
kernelParams = ["hibernate=no"];
kernel.sysctl = {
"fs.file-max" = pow 2 17;
"fs.inotify.max_user_watches" = pow 2 19;
"fs.suid_dumpable" = 0;
"kernel.core_uses_pid" = 1;
"kernel.exec-shield" = 1;
"kernel.kptr_restrict" = 1;
"kernel.maps_protect" = 1;
"kernel.msgmax" = pow 2 16;
"kernel.msgmnb" = pow 2 16;
"kernel.pid_max" = pow 2 16;
"kernel.randomize_va_space" = 2;
"kernel.shmall" = pow 2 28;
"kernel.shmmax" = pow 2 28;
"kernel.sysrq" = 0;
"vm.dirty_background_bytes" = pow 2 22;
"vm.dirty_background_ratio" = 5;
"vm.dirty_bytes" = pow 2 22;
"vm.dirty_ratio" = 30;
"vm.min_free_kbytes" = pow 2 16;
"vm.mmap_min_addr" = pow 2 12;
"vm.overcommit_memory" = mkDefault 0;
"vm.overcommit_ratio" = mkDefault 50;
"vm.vfs_cache_pressure" = 50;
};
};
}
|
