# Setup lowmem module
# vm.lowmem_deny_watermark_pages=32768
# vm.lowmem_notify_high_pages=98304
# vm.lowmem_notify_low_pages=131072
# vm.lowmem_nr_decay_pages=1024

# Exclude some UIDs from memory allocation denial.
# 30000 is messagebus, 30001 could be used by Matchbox
# vm.lowmem_allowed_uids=30000 30001 30002 30003

net.ipv4.conf.all.accept_redirects=0
net.ipv4.conf.default.accept_redirects=0
net.ipv4.conf.all.rp_filter=1
net.ipv4.conf.default.rp_filter=1
net.ipv4.icmp_ignore_bogus_error_responses=1
net.ipv4.icmp_echo_ignore_broadcasts=1
net.ipv4.ip_local_port_range=49152 65535

# adjust other kernel parameters to minimize memory consumption
# and optimize IO pressure
kernel.pty.max=16
kernel.threads-max=1024
fs.file-max=32768
vm.swappiness=25
#vm.page-cluster=5
vm.dirty_expire_centisecs=500
net.core.rmem_default=65536
net.core.wmem_default=16384

# Disable sysrq to avoid accidental console-carbage resets.
kernel.sysrq=0

kernel.core_pattern=/dev/null
kernel.panic=1
kernel.panic_on_oops=1

# Adjust flushing of memory card buffers 
vm.dirty_ratio=40
vm.dirty_background_ratio=10

# Allow user to have more inotify instances
fs.inotify.max_user_instances=512
