From fe0e1e518e836cce1515bda2e9c81bad3f3d3285 Mon Sep 17 00:00:00 2001 From: /rootzoll Date: Tue, 1 Aug 2023 00:14:46 +0200 Subject: [PATCH] #3983 switch on vm.overcommit_memory & higher fs.inotify.max_user_instances (#4041) --- build_sdcard.sh | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/build_sdcard.sh b/build_sdcard.sh index dc6940356..bccba22ad 100644 --- a/build_sdcard.sh +++ b/build_sdcard.sh @@ -677,8 +677,14 @@ bash -c "echo '# End of file' >> /etc/security/limits.conf" sed --in-place -i "23s/.*/session required pam_limits.so/" /etc/pam.d/common-session sed --in-place -i "25s/.*/session required pam_limits.so/" /etc/pam.d/common-session-noninteractive bash -c "echo '# end of pam-auth-update config' >> /etc/pam.d/common-session-noninteractive" -# increase the possible number of running processes from 128 -bash -c "echo 'fs.inotify.max_user_instances=4096' >> /etc/sysctl.conf" + +# Increase maximum number of inotify instances +bash -c "echo '# RaspiBlitz Edit: Set maximum number of inotify instances (8192 recommended for min 2GB RAM)' >> /etc/sysctl.conf" +bash -c "echo 'fs.inotify.max_user_instances=8192' >> /etc/sysctl.conf" + +# Activate overcommit_memory +bash -c "echo '# RaspiBlitz Edit: Use overcommit to prevent system crashes' >> /etc/sysctl.conf" +bash -c "echo 'vm.overcommit_memory=1' >> /etc/sysctl.conf" # *** fail2ban *** # based on https://raspibolt.org/security.html#fail2ban