SYSTEMD-SYSTEM.CONF(5) systemd-system.conf SYSTEMD-SYSTEM.CONF(5) systemd-system.conf system.conf.d systemd-user.conf user.conf.d - /etc/systemd/system.conf, /run/systemd/system.conf, /usr/lib/systemd/system.conf, /etc/systemd/system.conf.d/*.conf, /run/systemd/system.conf.d/*.conf, /usr/lib/systemd/system.conf.d/*.conf ~/.config/systemd/user.conf, /etc/systemd/user.conf, /run/systemd/user.conf, /usr/lib/systemd/user.conf, /etc/systemd/user.conf.d/*.conf, /run/systemd/user.conf.d/*.conf, /usr/lib/systemd/user.conf.d/*.conf systemd system.conf system.conf.d user.conf ( /etc/systemd/ /run/systemd/ /usr/lib/systemd/) user.conf.d. . systemd.syntax(7) . . : /etc/systemd/ /run/systemd/ /usr/local/lib/systemd/ [1] /usr/lib/systemd/. . (drop-ins) . ( /etc/ /usr/) . /usr/lib/systemd/*.conf.d/ /usr/local/lib/systemd/*.conf.d/ /etc/systemd/*.conf.d/. . *.conf.d/ . . (drop-ins) /usr/. /etc/ . . . . . 10-40 /usr/ 60-90 /etc/ /run/ . /dev/null /etc/ . [Manager]: LogColor=, LogLevel=, LogLocation=, LogTarget=, LogTime=, DumpCore=yes, CrashChangeVT=no, CrashShell=no, CrashAction=freeze, ShowStatus=yes, DefaultStandardOutput=journal, DefaultStandardError=inherit . . systemd(1) . 198. CtrlAltDelBurstAction= Ctrl-Alt-Delete 7 2 . "reboot-force" "poweroff-force" "reboot-immediate" "poweroff-immediate" "none". "reboot-force". 232. StatusUnitFormat= name description combined . name ( "systemd-journald.service") Description= ( "Journal Logging Service"). combined ( "systemd-journald.service - Journal Logging Service"). systemd.unit(5) Description=. 243. DefaultTimerAccuracySec= . AccuracySec= systemd.timer(5) . AccuracySec= . 1 . PID 1 TimerSlackNSec= . 212. TimerSlackNSec= PID 1 TimerSlackNSec= ( systemd.exec(5)). . prctl(2) . . . 198. CPUAffinity= . . . . . CPUAffinity= systemd.exec(5). 198. NUMAPolicy= NUMA NUMA . NUMAPolicy= systemd.exec(5). 243. NUMAMask= NUMA NUMA . NUMA default local NUMA . NUMAPolicy= systemd.exec(5). 243. DefaultMemoryAccounting=, DefaultTasksAccounting=, DefaultIOAccounting=, DefaultIPAccounting= MemoryAccounting= TasksAccounting= IOAccounting= IPAccounting=. systemd.resource-control(5) . DefaultMemoryAccounting= . DefaultTasksAccounting= . . 211. DefaultTasksMax= TasksMax= . systemd.resource-control(5) . . 15% kernel.pid_max= kernel.threads-max= cgroup pids.max. kernel.pid_max= 32 . kernel.pid_max= DefaultTasksMax= 4915 . 228. DefaultLimitCPU=, DefaultLimitFSIZE=, DefaultLimitDATA=, DefaultLimitSTACK=, DefaultLimitCORE=, DefaultLimitRSS=, DefaultLimitNOFILE=, DefaultLimitAS=, DefaultLimitNPROC=, DefaultLimitMEMLOCK=, DefaultLimitLOCKS=, DefaultLimitSIGPENDING=, DefaultLimitMSGQUEUE=, DefaultLimitNICE=, DefaultLimitRTPRIO=, DefaultLimitRTTIME= . setrlimit(2) . LimitXXX= systemd.exec(5) . ( PID 1) . . : o DefaultLimitNOFILE= 1024:524288. o DefaultLimitMEMLOCK= 8M. o DefaultLimitCORE= RLIMIT_CORE "infinity" PID 1 . PID 1 RLIMIT_NOFILE RLIMIT_MEMLOCK . 198. DefaultOOMPolicy= (OOM) systemd-oomd. OOMPolicy= . systemd.service(5) . Delegate= . 243. DefaultOOMScoreAdjust= OOM . ( OOM ) OOM 100 ( ). OOMScoreAdjust= . systemd.exec(5) . OOM . 250. DefaultMemoryPressureWatch=, DefaultMemoryPressureThresholdSec= MemoryPressureWatch= MemoryPressureThresholdSec= . systemd.resource-control(5) . "auto" "200ms" . . 254. RuntimeWatchdogSec=, RebootWatchdogSec=, KExecWatchdogSec= . ( "ms" "min" "h" "d" "w") "off" "default". "off" (: "0") : . "default" . ( ). RuntimeWatchdogSec= (/dev/watchdog0 WatchdogDevice= systemd.watchdog_device=) . . . . RebootWatchdogSec= . . RebootWatchdogSec= (PID 1) systemd-shutdown bootup(7) . RuntimeWatchdogSec=. JobTimeoutSec= JobTimeoutAction= [Unit] shutdown.target. RuntimeWatchdogSec= 0 () RebootWatchdogSec= 10 . KExecWatchdogSec= kexec . kexec ( / ) kexec RuntimeWatchdogSec= . KExecWatchdogSec= RuntimeWatchdogSec= . . 198. RuntimeWatchdogPreSec= . ( RuntimeWatchdogSec=). . ( ) RuntimeWatchdogPreGovernor=. . RuntimeWatchdogPreSec= ( RuntimeWatchdogSec=). RuntimeWatchdogSec=30 RuntimeWatchdogPreSec=10 20 (10 ). RuntimeWatchdogPreSec= 0 (). RuntimeWatchdogPreSec= RuntimeWatchdogSec=. . 251. RuntimeWatchdogPreGovernor= . . /sys/class/watchdog/watchdogX/pretimeout_available_governors. noop panic. . sysfs pretimeout_available_governors ( pretimeout_noop.ko) . 251. WatchdogDevice= . /dev/watchdog0. . 236. CapabilityBoundingSet= (capability bounding set) PID 1 . capabilities(7) . cap_from_name(3). . ~ . . CapabilityBoundingSet= PID 1 . 198. NoNewPrivileges= . PID 1 execve(2) ( setuid setgid ). . setuid setgid . . [2]. 239. ProtectSystem= "auto". /usr/ . "auto" () initrd . systemd.exec(5) : "full" "strict" . 256. SystemCallArchitectures= . . 32-bit x86 64-bit x86-64. SystemCallArchitectures= systemd.exec(5) . . "x86" "x86-64" "x32" "arm" "native". ( ). "native" . SIGSYS. 209. DefaultSmackProcessLabel= SMACK64 . SmackProcessLabel= . systemd.exec(5) . "/" SmackProcessLabel= . 252. DefaultRestrictSUIDSGID= . RestrictSUIDSGID=. systemd.exec(5) . 258. DefaultTimeoutStartSec= DefaultTimeoutStopSec= DefaultTimeoutAbortSec= DefaultRestartSec= TimeoutStartSec= TimeoutStopSec= TimeoutAbortSec= RestartSec= ( systemd.service(5) ). DefaultTimeoutStartSec= TimeoutSec= . DefaultTimeoutStartSec= DefaultTimeoutStopSec= 90 90 . DefaultTimeoutAbortSec= TimeoutStopSec=. DefaultRestartSec= 100 . 209. DefaultDeviceTimeoutSec= . x-systemd.device-timeout= /etc/fstab /etc/crypttab ( systemd.mount(5) crypttab(5)). 90 90 . 252. DefaultStartLimitIntervalSec=, DefaultStartLimitBurst= StartLimitIntervalSec= StartLimitBurst=. systemd.service(5) . DefaultStartLimitIntervalSec= 10 . DefaultStartLimitBurst= 5. 209. ReloadLimitIntervalSec=, ReloadLimitBurst= ( v256) . . . ReloadLimitIntervalSec= ReloadLimitBurst= . 253. DefaultEnvironment= . . environ(7) . /proc/PID/environ . "%" . : DefaultEnvironment="VAR1=word1 word2" VAR2=word3 "VAR3=word 5 6" "VAR1" "VAR2" "VAR3". 205. ManagerEnvironment= . DefaultEnvironment= . . . . . DefaultEnvironment= /proc/PID/environ . . [3] systemd. "%" . 248. DefaultEnvironment= ManagerEnvironment=. : 1. +-------------------+-----------------------------+--------------------------------+ | | | | +-------------------+-----------------------------+--------------------------------+ |"%a" | | | | | | | | | | | | | | | | | | . | | | | x86 | | | | x86-64 arm64. | | | | | | | | | | | | | | | | ConditionArchitecture= | | | | systemd.unit(5) | | | | | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%A" | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | IMAGE_VERSION= | | | | /etc/os-release. | | | | | | | | | | | | | | | | . | | | | os-release(5) | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%b" | | | | | | | | | | | | | | | | | | | | | | | | | | . | | | | random(4) | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%B" | | | | | | | | | | | | | | | | | | | | | | | | | | BUILD_ID= | | | | /etc/os-release. | | | | | | | | | | | | | | | | | | | | . | | | | os-release(5) | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%H" | | | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%l" | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%m" | | | | | | | | | | | | | | | | | | | | | | | | | | . | | | | machine-id(5) | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%M" | | | | | | | | | | | | | | | | | | | | | | | | | | IMAGE_ID= | | | | /etc/os-release. | | | | | | | | | | | | | | | | | | | | . | | | | os-release(5) | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%o" | | | | | | | | | | | | | | | | | | | | | | ID= | | | | /etc/os-release. | | | | os-release(5) | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%v" | | | | | | uname | | | | -r. | +-------------------+-----------------------------+--------------------------------+ |"%w" | | | | | | | | | | | | | | | | | | | | | | | | | | VERSION_ID= | | | | /etc/os-release. | | | | | | | | | | | | | | | | | | | | . | | | | os-release(5) | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%W" | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | VARIANT_ID= | | | | /etc/os-release. | | | | | | | | | | | | | | | | | | | | . | | | | os-release(5) | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%T" | | /tmp | | | | | | | | | | | | "$TMPDIR" | | | | "$TEMP" "$TMP". | | | | ( | | | | | | | | | | | | | | | | .) | +-------------------+-----------------------------+--------------------------------+ |"%V" | | /var/tmp | | | | | | | | | | | | "$TMPDIR" | | | | "$TEMP" "$TMP". | | | | ( | | | | | | | | | | | | | | | | .) | +-------------------+-----------------------------+--------------------------------+ |"%h" | | | | | | | | | | | | | | | | | | | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%u" | | | | | | | | | | | | | | | | | | | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%U" | | | | | | | | | | | | | | | | | | | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%g" | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%G" | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%s" | | | | | | | | | | | | | | | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ |"%%" | | "%%" | | | | "%" | | | | | | | | | | | | | | | | . | +-------------------+-----------------------------+--------------------------------+ systemd 252 DefaultBlockIOAccounting= . cgroup. systemd 258 DefaultCPUAccounting= cgroup . systemd(1), systemd.directives(7), systemd.exec(5), systemd.service(5), environ(7), capabilities(7) 1. . /usr/local/ . 2. https://docs.kernel.org/userspace-api/no_new_privs.html 3. https://systemd.io/ENVIRONMENT 3 . . : . systemd 260.2 SYSTEMD-SYSTEM.CONF(5)