add recommended k3s sysctl

9 months ago · 4ad462dc0b
parent c74e70f883
commit 4ad462dc0b
1 changed files with 7 additions and 0 deletions
--- a/config/etc/sysctl.d/90-kubelet.conf
+++ b/config/etc/sysctl.d/90-kubelet.conf
@ -0,0 +1,7 @@
+# https://docs.k3s.io/security/hardening-guide?_highlight=sysctl#ensure-protect-kernel-defaults-is-set
+
+vm.panic_on_oom=0
+vm.overcommit_memory=1
+kernel.panic=10
+kernel.panic_on_oops=1
+kernel.keys.root_maxbytes=25000000