units: bump the RLIMIT_NOFILE soft limit for all services that access the journal

This updates the unit files of all our serviecs that deal with journal
stuff to use a higher RLIMIT_NOFILE soft limit by default. The new value
is the same as used for the new HIGH_RLIMIT_NOFILE we just added.

With this we ensure all code that access the journal has higher
RLIMIT_NOFILE. The code that runs as daemon via the unit files, the code
that is run from the user's command line via C code internal to the
relevant tools. In some cases this means we'll redundantly bump the
limits as there are tools run both from the command line and as service.
This commit is contained in:
Lennart Poettering 2018-10-01 18:08:27 +02:00
parent 52d6207578
commit c35ee02c61
5 changed files with 16 additions and 14 deletions

View File

@ -30,9 +30,9 @@ RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
SystemCallArchitectures=native
LockPersonality=yes
# If there are many split upjournal files we need a lot of fds to
# access them all and combine
LimitNOFILE=16384
# If there are many split up journal files we need a lot of fds to access them
# all in parallel.
LimitNOFILE=262144
[Install]
Also=systemd-journal-gatewayd.socket

View File

@ -32,5 +32,9 @@ SystemCallArchitectures=native
LockPersonality=yes
LogsDirectory=journal/remote
# If there are many split up journal files we need a lot of fds to access them
# all in parallel.
LimitNOFILE=262144
[Install]
Also=systemd-journal-remote.socket

View File

@ -32,9 +32,9 @@ SystemCallArchitectures=native
LockPersonality=yes
StateDirectory=systemd/journal-upload
# If there are many split up journal files we need a lot of fds to
# access them all and combine
LimitNOFILE=16384
# If there are many split up journal files we need a lot of fds to access them
# all in parallel.
LimitNOFILE=262144
[Install]
WantedBy=multi-user.target

View File

@ -35,8 +35,6 @@ SystemCallArchitectures=native
LockPersonality=yes
IPAddressDeny=any
# Increase the default a bit in order to allow many simultaneous
# services being run since we keep one fd open per service. Also, when
# flushing journal files to disk, we might need a lot of fds when many
# journal files are combined.
LimitNOFILE=16384
# If there are many split up journal files we need a lot of fds to access them
# all in parallel.
LimitNOFILE=262144

View File

@ -37,6 +37,6 @@ LockPersonality=yes
IPAddressDeny=any
FileDescriptorStoreMax=512
# Increase the default a bit in order to allow many simultaneous
# logins since we keep one fd open per session.
LimitNOFILE=16384
# Increase the default a bit in order to allow many simultaneous logins since
# we keep one fd open per session.
LimitNOFILE=262144