From: Tomas Krizek <tomas.krizek@nic.cz>
Date: Mon, 16 Dec 2019 13:15:09 +0000 (+0100)
Subject: daemon/main: decrease suggested nofile hard limit to 512k
X-Git-Tag: v5.0.0~12^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7a89c07d98dd7e1e2c831bcb4cb9191dec884381;p=thirdparty%2Fknot-resolver.git

daemon/main: decrease suggested nofile hard limit to 512k

512k (or more) seems to be hard limit valued used by multiple distros
(fedora, arch, ubuntu, debian).

Closes #476
---

diff --git a/daemon/main.c b/daemon/main.c
index 94ef69bdf..87f08ac9f 100644
--- a/daemon/main.c
+++ b/daemon/main.c
@@ -798,8 +798,8 @@ int main(int argc, char **argv)
 	if (ret) {
 		kr_log_error("[system] failed to get or set file-descriptor limit: %s\n",
 				strerror(errno));
-	} else if (rlim.rlim_cur < 1024*1024) {
-		kr_log_info("[system] warning: hard limit for number of file-descriptors is only %ld but recommended value is 1048576\n",
+	} else if (rlim.rlim_cur < 512*1024) {
+		kr_log_info("[system] warning: hard limit for number of file-descriptors is only %ld but recommended value is 524288\n",
 				rlim.rlim_cur);
 	}
 
diff --git a/systemd/kresd@.service.in b/systemd/kresd@.service.in
index 0e7e86201..b6dcf29d2 100644
--- a/systemd/kresd@.service.in
+++ b/systemd/kresd@.service.in
@@ -17,7 +17,7 @@ Group=@group@
 TimeoutStopSec=10s
 WatchdogSec=10s
 Restart=on-abnormal
-LimitNOFILE=1048576
+LimitNOFILE=524288
 Sockets=kresd.socket
 Sockets=kresd-tls.socket
 Sockets=kresd-control@%i.socket
diff --git a/systemd/nosocket/kresd@.service.in b/systemd/nosocket/kresd@.service.in
index f6e369002..3e846b7c9 100644
--- a/systemd/nosocket/kresd@.service.in
+++ b/systemd/nosocket/kresd@.service.in
@@ -19,7 +19,7 @@ AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_SETPCAP
 TimeoutStopSec=10s
 WatchdogSec=10s
 Restart=on-abnormal
-LimitNOFILE=1048576
+LimitNOFILE=524288
 
 [Install]
 WantedBy=kresd.target