--- # systemctl set-property user.slice CPUShares=1500 MemoryLimit=13G # systemctl set-property system.slice CPUShares=1000 MemoryLimit=13G # systemctl set-property workload.slice CPUShares=7500 MemoryLimit=100G # 启用 IPMI - name: "copy ipmi.conf to /etc/sysconfig/ipmi" copy: src: "{{ role_path }}/templates/ipmi.conf.j2" dest: /etc/sysconfig/ipmi mode: 0644 - name: "enable ipmi" systemd: name: ipmi enabled: yes # 启用 Watchdog - name: "copy watchdog.conf to /etc/watchdog.conf" copy: src: "{{ role_path }}/templates/watchdog.conf.j2" dest: /etc/watchdog.conf mode: 0644 - name: "enable watchdog" systemd: name: watchdog enabled: yes - name: "enable irqbalance" systemd: name: irqbalance enabled: yes #Set CPU frequency scaling - name: "copy cpupower.j2 to /etc/sysconfig/cpupower" copy: src: "{{ role_path }}/templates/cpupower.j2" dest: /etc/sysconfig/cpupower mode: 0644 - name: "enable cpupower" systemd: name: cpupower enabled: yes #not wanted dev-hugepages.mount - name: 'do not wanted dev-hugepages.mount' file: path: "/usr/lib/systemd/system/sysinit.target.wants/dev-hugepages.mount" state: absent - name: "disabled firewalld" systemd: name: firewalld enabled: no - name: "disable pmcd" systemd: name: pmcd enabled: no - name: "disable pmlogger" systemd: name: pmlogger enabled: no - name: "disable pmie" systemd: name: pmie enabled: no - name: "Create /usr/lib/systemd/system/systemd-coredump@.service.d directory" file: path: "{{ item }}" state: directory mode: '0755' with_items: - /usr/lib/systemd/system/systemd-coredump@.service.d/ - name: "copy service_override_RuntimeMaxSec.conf to dest" copy: src: "{{ role_path }}/templates/service_override_RuntimeMaxSec.conf" dest: /usr/lib/systemd/system/systemd-coredump@.service.d/service_override_RuntimeMaxSec.conf mode: 0644 - name: "disable sssd" systemd: name: sssd enabled: no