Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

zram-generator defaults to 50% of the ram where systemd-swap defaults to
25% of the ram.

[1] https://lists.archlinux.org/pipermail/arch-dev-public/2021-May/030429.html

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Kernel's OOM killer is often too slow, as a result system ends up
thrashing heavily. Have a user-space oom killer helps.

Using default settings as described in
https://www.freedesktop.org/software/systemd/man/oomd.conf.html



Closes: #306

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

yaml: truthy value should be one of [false, true] (truthy)
yaml: wrong indentation: expected 4 but found 2 (indentation)
yaml: too few spaces before comment (comments)
yaml: missing starting space in comment (comments)
yaml: too many blank lines (1 > 0) (empty-lines)
yaml: too many spaces after colon (colons)
yaml: comment not indented like content (comments-indentation)
yaml: no new line character at the end of file (new-line-at-end-of-file)
load-failure: Failed to load or parse file
parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.

It should also be installed before installing any packages with Ansible.

They were apparently controversial and more research is needed.

Kristian Klausen authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

Fix #155

Ansible's hostname supports setting the hostname with hostnamectl, which
makes our systems after the removal of inetutils legacy free.

This is needed for the role to work in containers. The option will also
be applied upstream, see the upstream ticket:
https://github.com/smartmontools/smartmontools/issues/62

Jelle van der Waa authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

Prefer using our maintained version of checkservices from the contrib
repository hosted on our Gitlab repository. This has the benefit of
getting rid of a submodule which isn't cloned by default.

This will move the audit messages from dmesg and reduce the duplication
in the journal.

roles/common: Replace Seblu's submodule with a submodule pointing to our contrib repository on Arch Linux's github.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

journal logs are nice and all, but they are comparatively large and
(mostly) uncompressed. This way we at can at least maintain logs for a
reasonable time frame to investigate issues even if the journal decided
that it has to clean up "old" logs.

The logrotate config uses an archive directory to rotate logs to for
stricter permissions on old logs to increase data protection (EU GDPR).

Signed-off-by: Florian Pritz <bluewind@xinu.at>

It's highly unlikely we'll be using anything other than cubic, so there
is no need for this to be configurable.

sch_fq used to be required by BBR but this is no longer the case after
a fallback to internal pacing was implemented in Linux 4.13. Plus, BBR
was recently disabled on Arch's infra.

Now, we could just set the default qdisc to fq_codel for all machines,
but it seems the default for multiqueue network interfaces is sch_mq +
fq_codel sub-qdiscs (one per tx queue).

I am not sure how to cleanly implement the above multiqueue distinction
in Ansible, so drop the default_qdisc configuration. I will then adjust
affected machines manually to remove any configured qdiscs.

We don't need resolved and it is sometimes buggy so let's just get rid
of it and use unbound like we do on our mail machines already.

Details: https://kanboard.archlinux.org/public/task/104/7dd7510424e4229247e8e0b90bf43e1553fce86cdf8475b60edc956ed5a8



Signed-off-by: Florian Pritz <bluewind@xinu.at>

Enable pacache timer to cleanup old packages and keeps the lsat three
version of a package.

Manpage recommands it and Jan wants it.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>