Skip to content

Commit

Permalink
Sync other systemd /tmp mount options with Fedora
Browse files Browse the repository at this point in the history
The Qubes config for systemd /tmp mount options overrides the size of
/tmp due to memory ballooning. However, it only copies some of the
other options. This patch syncs with Fedora by also adding the options
nosuid,nodev,nr_inodes=1m. Setting nosuid and nodev should have minor
security benefits.

Increasing nr_inodes is important because otherwise the default is
nr_inodes=44492, which is too few inodes for software like "opam" which
uses /tmp as a staging directory.
  • Loading branch information
dmoerner committed Nov 19, 2024
1 parent ee003d4 commit eb83bb7
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion vm-systemd/tmp.mount.d/30_qubes.conf
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
[Mount]
# Default initial size is '50%' (of physical RAM at system startup)
# Because of memory ballooning this happen to be very low number
Options=mode=1777,strictatime,size=1G
Options=mode=1777,strictatime,nosuid,nodev,size=1G,nr_inodes=1m

0 comments on commit eb83bb7

Please sign in to comment.