Skip to content

Commit 19e5a65

Browse files
authored
Recent discovery fix (#1054)
* on RL 9, `net.core.bpf_jit_limit` can't be set above 1000000000 * attempting to set it above this value will cause the default to be set (264241152) which may not be enough for a large number of containers * added an admonition to caution on this and also a documentation note within the sysctl values file.
1 parent d2dc6d3 commit 19e5a65

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

docs/books/lxd_server/01-install.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -112,6 +112,10 @@ To make these kernel changes, we are going to create a file called _90-lxd-overr
112112
vi /etc/sysctl.d/90-lxd-override.conf
113113
```
114114

115+
!!! warning "RL 9 and MAX value of `net.core.bpf_jit_limit`
116+
117+
Because of recent kernel security updates, the max value of `net.core.bpf_jit_limit` appears to be 1000000000. Please adjust this value in the self-documenting file below if you are running Rocky Linux 9.x. If you set it above this limit **OR** if you fail to set it at all, it will default to the system default of 264241152, which may not be enough if you run a large number of containers.
118+
115119
Place the following content in that file. Note that if you are wondering what we are doing here, the file content below is self-documenting:
116120

117121
```
@@ -150,7 +154,7 @@ ded if not using IPv6, but...
150154
151155
net.ipv6.neigh.default.gc_thresh3 = 8192
152156
153-
# This is a limit on the size of eBPF JIT allocations which is usually set to PAGE_SIZE * 40000.
157+
# This is a limit on the size of eBPF JIT allocations which is usually set to PAGE_SIZE * 40000. Set this to 1000000000 if you are running Rocky Linux 9.x
154158
155159
net.core.bpf_jit_limit = 3000000000
156160

0 commit comments

Comments
 (0)