nixpkgs/nixos/modules/profiles
Florian Klink 9be0327a49 nixos/systemd: install sysctl snippets
systemd provides two sysctl snippets, 50-coredump.conf and
50-default.conf.

These enable:
 - Loose reverse path filtering
 - Source route filtering
 - `fq_codel` as a packet scheduler (this helps to fight bufferbloat)

This also configures the kernel to pass coredumps to `systemd-coredump`.
These sysctl snippets can be found in `/etc/sysctl.d/50-*.conf`,
and overridden via `boot.kernel.sysctl`
(which will place the parameters in `/etc/sysctl.d/60-nixos.conf`.

Let's start using these, like other distros already do for quite some
time, and remove those duplicate `boot.kernel.sysctl` options we
previously did set.

In the case of rp_filter (which systemd would set to 2 (loose)), make
our overrides to "1" more explicit.
2019-08-18 17:54:26 +02:00
..
all-hardware.nix usb-storage -> uas 2018-08-23 01:42:34 +00:00
base.nix Revert "zfs cannot be distributed. Disabling it in the isos." 2018-11-26 17:51:18 -05:00
clone-config.nix ova: add cloneConfigExtra option 2018-10-21 14:52:49 -05:00
demo.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
docker-container.nix use closure-info for building system tarball 2018-11-07 12:52:53 +08:00
graphical.nix profiles/graphical.nix: Enable pulseaudio for virtualbox appliances 2019-02-22 07:23:59 +01:00
hardened.nix nixos/systemd: install sysctl snippets 2019-08-18 17:54:26 +02:00
headless.nix modules/profiles/minimal: sound is disabled by default 2019-01-13 13:47:36 +01:00
installation-device.nix installer: Don't run as root 2019-08-12 14:45:27 -04:00
minimal.nix types.optionSet: deprecate and remove last usages 2019-01-31 00:41:10 +02:00
qemu-guest.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00