evolinux-base: swappiness is customizable
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
Jérémy Lecour 2020-09-01 14:08:39 +02:00 committed by Jérémy Lecour
parent afa0fd35c8
commit 37ed5dd393
3 changed files with 6 additions and 4 deletions

View file

@ -12,6 +12,7 @@ The **patch** part changes incrementally at each release.
### Added ### Added
* evolinux-base: swappiness is customizable
* tomcat: root directory owner/group are configurable * tomcat: root directory owner/group are configurable
### Changed ### Changed

View file

@ -50,7 +50,8 @@ evolinux_kernel_include: True
evolinux_kernel_reboot_after_panic: True evolinux_kernel_reboot_after_panic: True
evolinux_kernel_disable_tcp_timestamps: True evolinux_kernel_disable_tcp_timestamps: True
evolinux_kernel_reduce_swapiness: True evolinux_kernel_customize_swappiness: True
evolinux_kernel_swappiness: 20
evolinux_kernel_cve20165696: True evolinux_kernel_cve20165696: True
# fstab # fstab

View file

@ -32,14 +32,14 @@
reload: yes reload: yes
when: evolinux_kernel_disable_tcp_timestamps when: evolinux_kernel_disable_tcp_timestamps
- name: Reduce the swapiness - name: Customize the swappiness
sysctl: sysctl:
name: vm.swappiness name: vm.swappiness
value: 20 value: "{{ evolinux_kernel_swappiness }}"
sysctl_file: "{{ evolinux_kernel_sysctl_path }}" sysctl_file: "{{ evolinux_kernel_sysctl_path }}"
state: present state: present
reload: yes reload: yes
when: evolinux_kernel_reduce_swapiness when: evolinux_kernel_customize_swappiness
- name: Patch for TCP stack vulnerability CVE-2016-5696 - name: Patch for TCP stack vulnerability CVE-2016-5696
sysctl: sysctl: