linux/system/single/mcp.yml

classes:
- system.linux.network.mcp
- system.linux.system.single.simple
- system.linux.system.repo.mcp.apt_mirantis.mirantis_pining
parameters:
  linux:
    system:
      kernel:
        modules:
          - nf_conntrack
        sysctl:
          net.ipv4.tcp_keepalive_intvl: 3
          net.ipv4.tcp_keepalive_time: 30
          net.ipv4.tcp_keepalive_probes: 8
          fs.file-max: 124165
          net.core.somaxconn: 4096
          net.core.netdev_budget: 600
          net.core.netdev_budget_usecs: 5000
          vm.swappiness: 10
          net.nf_conntrack_max: 1048576
          net.ipv4.tcp_retries2: 5
          net.ipv4.tcp_max_syn_backlog: 8192
          net.ipv4.neigh.default.gc_thresh1: 4096
          net.ipv4.neigh.default.gc_thresh2: 8192
          net.ipv4.neigh.default.gc_thresh3: 16384
          net.core.netdev_max_backlog: 261144
          net.ipv4.tcp_tw_reuse: 1
          kernel.panic: 60
          kernel.unprivileged_userns_clone: 0
      cpu:
        governor: performance
      limit:
        default:
          enabled: true
          domain: "*"
          limits:
            - type: hard
              item: nofile
              value: 307200
            - type: soft
              item: nofile
              value: 307200
            - type: soft
              item: nproc
              value: 307200
            - type: hard
              item: nproc
              value: 307200
      package:
        smartmontools:
          version: latest
      systemd:
        system:
          Manager:
            DefaultLimitNOFILE: 307200
            DefaultLimitNPROC: 307200