claudiomaradonna/castrum
1
0
Fork 0
Code Pull requests Activity

feat(hardening-basic): own vm.vfs_cache_pressure at the kernel default #11

Merged
claudiomaradonna merged 1 commit from feat/vfs-cache-pressure into main 2026-09-25 20:42:35 +02:00
Conversation 0 Commits 1 Files changed 4 +17 -3
claudiomaradonna commented 2026-09-25 20:42:13 +02:00
Owner
Copy link

A host carried vm.vfs_cache_pressure = 75 in /etc/sysctl.conf, unmanaged
and unreported. Below 100 keeps dentry and inode caches at the expense of
the page cache, which helps only hosts walking large file trees, and with
server swappiness at 0 pushes more pressure onto the page cache.

Write the kernel's own 100 in 99-hardening.conf so the fleet agrees and
the read-back catches a stray value. A file-server group can set its own
value through hardening_sysctl_vm_vfs_cache_pressure; null omits the line.

A host carried vm.vfs_cache_pressure = 75 in /etc/sysctl.conf, unmanaged and unreported. Below 100 keeps dentry and inode caches at the expense of the page cache, which helps only hosts walking large file trees, and with server swappiness at 0 pushes more pressure onto the page cache. Write the kernel's own 100 in 99-hardening.conf so the fleet agrees and the read-back catches a stray value. A file-server group can set its own value through hardening_sysctl_vm_vfs_cache_pressure; null omits the line.
A host carried vm.vfs_cache_pressure = 75 in /etc/sysctl.conf, unmanaged
and unreported. Below 100 keeps dentry and inode caches at the expense of
the page cache, which helps only hosts walking large file trees, and with
server swappiness at 0 pushes more pressure onto the page cache.

Write the kernel's own 100 in 99-hardening.conf so the fleet agrees and
the read-back catches a stray value. A file-server group can set its own
value through hardening_sysctl_vm_vfs_cache_pressure; null omits the line.
claudiomaradonna deleted branch feat/vfs-cache-pressure 2026-09-25 20:42:42 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
claudiomaradonna/castrum!11
No description provided.