Michal Sekletar 48da47eeca cryptsetup-generator: set high OOM score for systemd-cryptsetup instances ...

With new LUKS2 header format it is possible to use Argon2 key derivation
function. This function is "memory-hard" hence keyslot unlocking can
potentially use a lot of RAM as this increases resistance to massively
parallel GPU based password cracking.

However, when multiple systemd-cryptsetup binaries run at the same
time it is very likely that system using Argon2 (e.g. Fedora 30)
will encounter memory-pressure during early boot, following OOM killing
spree.

This patch aims to lower the damage done by OOM killer and sets OOMScore
for systemd-cryptsetup units to 500. Hopefully OOM killer will then
shoot us down and leave rest of the system services alone.

2019-03-28 15:52:41 +01:00

..

cryptsetup-generator.c

cryptsetup-generator: set high OOM score for systemd-cryptsetup instances

2019-03-28 15:52:41 +01:00

cryptsetup.c

headers: remove unneeded includes from util.h

2019-03-27 11:53:12 +01:00