From c35ee02c61d17b0656e16b0b2fa0449bda9df507 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Mon, 1 Oct 2018 18:08:27 +0200 Subject: [PATCH] units: bump the RLIMIT_NOFILE soft limit for all services that access the journal This updates the unit files of all our serviecs that deal with journal stuff to use a higher RLIMIT_NOFILE soft limit by default. The new value is the same as used for the new HIGH_RLIMIT_NOFILE we just added. With this we ensure all code that access the journal has higher RLIMIT_NOFILE. The code that runs as daemon via the unit files, the code that is run from the user's command line via C code internal to the relevant tools. In some cases this means we'll redundantly bump the limits as there are tools run both from the command line and as service. --- units/systemd-journal-gatewayd.service.in | 6 +++--- units/systemd-journal-remote.service.in | 4 ++++ units/systemd-journal-upload.service.in | 6 +++--- units/systemd-journald.service.in | 8 +++----- units/systemd-logind.service.in | 6 +++--- 5 files changed, 16 insertions(+), 14 deletions(-) diff --git a/units/systemd-journal-gatewayd.service.in b/units/systemd-journal-gatewayd.service.in index 9768928..7530d4c 100644 --- a/units/systemd-journal-gatewayd.service.in +++ b/units/systemd-journal-gatewayd.service.in @@ -30,9 +30,9 @@ RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 SystemCallArchitectures=native LockPersonality=yes -# If there are many split upjournal files we need a lot of fds to -# access them all and combine -LimitNOFILE=16384 +# If there are many split up journal files we need a lot of fds to access them +# all in parallel. +LimitNOFILE=262144 [Install] Also=systemd-journal-gatewayd.socket diff --git a/units/systemd-journal-remote.service.in b/units/systemd-journal-remote.service.in index a94265f..c1de676 100644 --- a/units/systemd-journal-remote.service.in +++ b/units/systemd-journal-remote.service.in @@ -32,5 +32,9 @@ SystemCallArchitectures=native LockPersonality=yes LogsDirectory=journal/remote +# If there are many split up journal files we need a lot of fds to access them +# all in parallel. +LimitNOFILE=262144 + [Install] Also=systemd-journal-remote.socket diff --git a/units/systemd-journal-upload.service.in b/units/systemd-journal-upload.service.in index 42da70f..b692009 100644 --- a/units/systemd-journal-upload.service.in +++ b/units/systemd-journal-upload.service.in @@ -32,9 +32,9 @@ SystemCallArchitectures=native LockPersonality=yes StateDirectory=systemd/journal-upload -# If there are many split up journal files we need a lot of fds to -# access them all and combine -LimitNOFILE=16384 +# If there are many split up journal files we need a lot of fds to access them +# all in parallel. +LimitNOFILE=262144 [Install] WantedBy=multi-user.target diff --git a/units/systemd-journald.service.in b/units/systemd-journald.service.in index 52939e6..2c09a8b 100644 --- a/units/systemd-journald.service.in +++ b/units/systemd-journald.service.in @@ -35,8 +35,6 @@ SystemCallArchitectures=native LockPersonality=yes IPAddressDeny=any -# Increase the default a bit in order to allow many simultaneous -# services being run since we keep one fd open per service. Also, when -# flushing journal files to disk, we might need a lot of fds when many -# journal files are combined. -LimitNOFILE=16384 +# If there are many split up journal files we need a lot of fds to access them +# all in parallel. +LimitNOFILE=262144 diff --git a/units/systemd-logind.service.in b/units/systemd-logind.service.in index 5e090bc..8b264ff 100644 --- a/units/systemd-logind.service.in +++ b/units/systemd-logind.service.in @@ -37,6 +37,6 @@ LockPersonality=yes IPAddressDeny=any FileDescriptorStoreMax=512 -# Increase the default a bit in order to allow many simultaneous -# logins since we keep one fd open per session. -LimitNOFILE=16384 +# Increase the default a bit in order to allow many simultaneous logins since +# we keep one fd open per session. +LimitNOFILE=262144 -- 2.7.4