The security tracker is not compatible yet with the new sqlalchemy, use
the old version in our repos

Useful for mail.archlinux.org where this setting doesn't matter since we
force the SSH command to passwd and zsh was removed as part of the tools
cleanup effort recently (stops shadow.service from complaining about zsh
missing).

sort + groupby fanciness by @klausenbusk.

A string is always "true"[1].

[1] https://stackoverflow.com/a/34868470

Fix #392

Thorben Günther authored Jul 15, 2021 and Kristian Klausen committed Oct 02, 2021

shell is like command but runs the command through a shell, so that
piping will work.

Jakub Klinkovský authored Sep 18, 2021 and Kristian Klausen committed Oct 02, 2021

We've hit this problem at least twice in the past, last time with the new
Vector skin update. With this change it should not be necessary to do
anything manually after an update.

Jan Alexander Steffens (heftig) authored May 20, 2021 and Kristian Klausen committed Sep 27, 2021

- When loki hits 5.5G RSS, aggressively reclaim its memory. This puts
  it under memory pressure.
- When loki hits 6G RSS, invoke the kernel OOM killer.
- When loki is under severe memory pressure, have systemd-oomd kill it.

Jan Alexander Steffens (heftig) authored May 20, 2021 and Kristian Klausen committed Sep 27, 2021

- Allow killing of any cgroup if swap is about to run out. When swap is
  at least 90% full, oomd will kill a cgroup, tending to kill the cgroup
  with the highest swap usage.
- Allow killing cgroups of logged in users under severe memory pressure.
  When a cgroup is stalled waiting for memory at least 60% of the time,
  for at least 30 seconds, oomd will attempt to kill it or one of its
  descendant cgroups.

This partially reverts commit c3d00264.

The smartd changes are not ready to land yet and were included in the
above commit by accident.

phrik has a polkit rule for demize to restart phrik

Some people love to do 48 req/s to our tracker which causes ~100% cpu.
For now we allow 5req/sec with a burst of 10 requests.

Ref: service-agreements!16