9be0327a49
systemd provides two sysctl snippets, 50-coredump.conf and 50-default.conf. These enable: - Loose reverse path filtering - Source route filtering - `fq_codel` as a packet scheduler (this helps to fight bufferbloat) This also configures the kernel to pass coredumps to `systemd-coredump`. These sysctl snippets can be found in `/etc/sysctl.d/50-*.conf`, and overridden via `boot.kernel.sysctl` (which will place the parameters in `/etc/sysctl.d/60-nixos.conf`. Let's start using these, like other distros already do for quite some time, and remove those duplicate `boot.kernel.sysctl` options we previously did set. In the case of rp_filter (which systemd would set to 2 (loose)), make our overrides to "1" more explicit. |
||
|---|---|---|
| .. | ||
| all-hardware.nix | ||
| base.nix | ||
| clone-config.nix | ||
| demo.nix | ||
| docker-container.nix | ||
| graphical.nix | ||
| hardened.nix | ||
| headless.nix | ||
| installation-device.nix | ||
| minimal.nix | ||
| qemu-guest.nix | ||