From 41d083a9f3ebcde8e510e3e5686843e06ae0dd93 Mon Sep 17 00:00:00 2001
From: Dominik Chilla <dominik@zwackl.de>
Date: Thu, 26 Nov 2020 11:02:56 +0100
Subject: [PATCH] k3s systemd-unit memory limit

---
 README.md | 27 ++++++++++++++++++++++++++-
 1 file changed, 26 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 551f2d8..84ed2b2 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@
   * [Disable Traefik-ingress](#disable-traefik-ingress)
   * [Enable NGINX-ingress](#enable-nginx-ingress)
     * [Installation](#install-nginx-ingress)
-* [Cert-Manager (references ingress controller)](#cert-manager)
+* [Cer t-Manager (references ingress controller)](#cert-manager)
   * [Installation](#cert-manager-install)
   * [Let´s Encrypt issuer](#cert-manager-le-issuer)
   * [Deploying a LE-certificate](#cert-manager-ingress)
@@ -37,6 +37,31 @@ https://k3s.io/:
 ```
 curl -sfL https://get.k3s.io | sh -
 ```
+If disired, set a memory consumption limit of the systemd-unit like so:
+```
+root#> mkdir /etc/systemd/system/k3s.service.d
+root#> vi /etc/systemd/system/k3s.service.d/limits.conf
+[Service]
+MemoryMax=512M
+
+root#> systemctl daemon-reload
+root#> systemctl restart k3s
+
+root#> systemctl status k3s
+k3s.service - Lightweight Kubernetes
+   Loaded: loaded (/etc/systemd/system/k3s.service; enabled; vendor preset: enabled)
+  Drop-In: /etc/systemd/system/k3s.service.d
+           └─limits.conf
+   Active: active (running) since Thu 2020-11-26 10:46:26 CET; 13min ago
+     Docs: https://k3s.io
+  Process: 9618 ExecStartPre=/sbin/modprobe br_netfilter (code=exited, status=0/SUCCESS)
+  Process: 9619 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS)
+ Main PID: 9620 (k3s-server)
+    Tasks: 229
+   Memory: 510.6M (max: 512.0M)
+   CGroup: /system.slice/k3s.service
+
+```
 
 # Upstream DNS-resolver <a name="upstream-dns-resolver"></a>
 Docs: https://rancher.com/docs/rancher/v2.x/en/troubleshooting/dns/