SYSTEMD-SYSTEM.CONF(5) systemd-system.conf SYSTEMD-SYSTEM.CONF(5) (NAME) systemd-system.conf, system.conf.d, systemd-user.conf, user.conf.d - (SYNOPSIS) /etc/systemd/system.conf, /run/systemd/system.conf, /usr/lib/systemd/system.conf, /etc/systemd/system.conf.d/*.conf, /run/systemd/system.conf.d/*.conf, /usr/lib/systemd/system.conf.d/*.conf ~/.config/systemd/user.conf, /etc/systemd/user.conf, /run/systemd/user.conf, /usr/lib/systemd/user.conf, /etc/systemd/user.conf.d/*.conf, /run/systemd/user.conf.d/*.conf, /usr/lib/systemd/user.conf.d/*.conf (DESCRIPTION) systemd system.conf system.conf.d user.conf ( /etc/systemd/, /run/systemd/, /usr/lib/systemd/) user.conf.d . . systemd.syntax(7) . (CONFIGURATION DIRECTORIES AND PRECEDENCE) . : /etc/systemd/, /run/systemd/, /usr/local/lib/systemd/ [1], /usr/lib/systemd/. . (drop-ins) . ( /etc/ /usr/ ) . : /usr/lib/systemd/*.conf.d/, /usr/local/lib/systemd/*.conf.d/, /etc/systemd/*.conf.d/. (override) . *.conf.d/ . . /usr/ . /etc/ . . . . . 10-40 /usr/ 60-90 /etc/ /run/ . (symlink) /dev/null /etc/ . (OPTIONS) [Manager] : LogColor=, LogLevel=, LogLocation=, LogTarget=, LogTime=, DumpCore=yes, CrashChangeVT=no, CrashShell=no, CrashAction=freeze, ShowStatus=yes, DefaultStandardOutput=journal, DefaultStandardError=inherit . . systemd(1) . . CtrlAltDelBurstAction= Ctrl-Alt-Delete . "reboot-force", "poweroff-force", "reboot-immediate", "poweroff-immediate" "none" . "reboot-force" . . StatusUnitFormat= name, description combined . name ( "systemd-journald.service") Description= ( "Journal Logging Service"). combined ( "systemd-journald.service - Journal Logging Service"). Description= systemd.unit(5) . . DefaultTimerAccuracySec= . AccuracySec= systemd.timer(5) . AccuracySec= . 1min . slack PID 1 TimerSlackNSec= . . (RESOURCE MANAGEMENT) TimerSlackNSec= (timer slack) PID 1 TimerSlackNSec= ( systemd.exec(5) ). . prctl(2) . . . . CPUAffinity= (CPU affinity) . . . . . CPUAffinity= systemd.exec(5) . . NUMAPolicy= NUMA NUMA . NUMAPolicy= systemd.exec(5) . . NUMAMask= NUMA NUMA . NUMA default local NUMA . NUMAPolicy= systemd.exec(5) . . DefaultMemoryAccounting=, DefaultTasksAccounting=, DefaultIOAccounting=, DefaultIPAccounting= MemoryAccounting=, TasksAccounting=, IOAccounting=, IPAccounting= . systemd.resource-control(5) . DefaultMemoryAccounting= yes . DefaultTasksAccounting= yes . no . . DefaultTasksMax= TasksMax= . systemd.resource-control(5) . slice . kernel.pid_max=, kernel.threads-max= pids.max (cgroup) . kernel.pid_max= . kernel.pid_max= DefaultTasksMax= 4915 . . DefaultLimitCPU=, DefaultLimitFSIZE=, DefaultLimitDATA=, DefaultLimitSTACK=, DefaultLimitCORE=, DefaultLimitRSS=, DefaultLimitNOFILE=, DefaultLimitAS=, DefaultLimitNPROC=, DefaultLimitMEMLOCK=, DefaultLimitLOCKS=, DefaultLimitSIGPENDING=, DefaultLimitMSGQUEUE=, DefaultLimitNICE=, DefaultLimitRTPRIO=, DefaultLimitRTTIME= . setrlimit(2) . LimitXXX= systemd.exec(5) . ( PID 1) . (unset) . : o DefaultLimitNOFILE= 1024:524288 . o DefaultLimitMEMLOCK= 8M . o DefaultLimitCORE= RLIMIT_CORE PID 1 "infinity" . PID 1 RLIMIT_NOFILE RLIMIT_MEMLOCK . . DefaultOOMPolicy= (Linux OOM killer) systemd-oomd . OOMPolicy= . systemd.service(5) . Delegate= . . DefaultOOMScoreAdjust= OOM . ( OOM ) ( ) OOM ( ). OOMScoreAdjust= . systemd.exec(5) . OOM . . DefaultMemoryPressureWatch=, DefaultMemoryPressureThresholdSec= MemoryPressureWatch= MemoryPressureThresholdSec= . systemd.resource-control(5) . "auto" "200ms" . . . DefaultCPUPressureWatch=, DefaultCPUPressureThresholdSec= CPUPressureWatch= CPUPressureThresholdSec= . systemd.resource-control(5) . "auto" "200ms" . . . DefaultIOPressureWatch=, DefaultIOPressureThresholdSec= IOPressureWatch= IOPressureThresholdSec= . systemd.resource-control(5) . "auto" "200ms" . / (IO) . . (HARDWARE WATCHDOG) RuntimeWatchdogSec=, RebootWatchdogSec=, KExecWatchdogSec= (hardware watchdog) . ( "ms", "min", "h", "d", "w") "off" "default" . "off" ( : "0") : . "default" . ( ) . RuntimeWatchdogSec= (/dev/watchdog0 WatchdogDevice= systemd.watchdog_device= ) . . (embedded) . . RebootWatchdogSec= . . RebootWatchdogSec= (PID 1) systemd-shutdown bootup(7) . RuntimeWatchdogSec= . JobTimeoutSec= JobTimeoutAction= [Unit] shutdown.target . RuntimeWatchdogSec= 0 () RebootWatchdogSec= 10min . KExecWatchdogSec= kexec . kexec ( / ) kexec RuntimeWatchdogSec= . KExecWatchdogSec= RuntimeWatchdogSec= . . . RuntimeWatchdogPreSec= (pre-timeout) . ( RuntimeWatchdogSec=) . . RuntimeWatchdogPreGovernor= ( kernel panic) . . RuntimeWatchdogPreSec= ( RuntimeWatchdogSec=) . RuntimeWatchdogSec=30 RuntimeWatchdogPreSec=10 ( ) . RuntimeWatchdogPreSec= 0 () . RuntimeWatchdogPreSec= RuntimeWatchdogSec= . . . RuntimeWatchdogPreGovernor= . . /sys/class/watchdog/watchdogX/pretimeout_available_governors . (governor) noop panic . . sysfs pretimeout_available_governors ( pretimeout_noop.ko) . . WatchdogDevice= . /dev/watchdog0 . . . (SECURITY) CapabilityBoundingSet= (capabilities) (bounding set) PID 1 . capabilities(7) . cap_from_name(3) . . ~ . (effective) (permitted) (inheritable) . CapabilityBoundingSet= PID 1 . . NoNewPrivileges= . true PID 1 execve(2) ( setuid setgid ). false . setuid setgid . . : No New Privileges Flag[2]. . ProtectSystem= "auto" . true /usr/ (remount) . "auto" () initrd true false . systemd.exec(5) : "full" "strict" . . RestrictFileSystemAccess= "exec" . "no" . PID 1 BPF LSM (deny-default) : dm-verity ( initramfs ) . tmpfs procfs sysfs dm-verity . ( initramfs) . : system.conf kexec initrd . (enforcement hooks) execve() ("bprm_check_security") PROT_EXEC ("mmap_file") (JIT) ("file_mprotect") . overlayfs dm-verity BPF overlay . btrfs . kexec . "dm_verity.require_signatures=1" BPF LSM ("lsm=...,bpf"). PID 1 . "yes" "exec" . . systemd.restrict_filesystem_access= kernel-command-line(7) . . SystemCallArchitectures= . . x86 x86-64. SystemCallArchitectures= systemd.exec(5) . . "x86", "x86-64", "x32", "arm" "native". ( ). "native" . SIGSYS . . DefaultSmackProcessLabel= SMACK64 . SmackProcessLabel= . systemd.exec(5) . "/" SmackProcessLabel= . . DefaultRestrictSUIDSGID= . RestrictSUIDSGID= . systemd.exec(5) . . (TIMEOUTS AND RATE LIMITS) DefaultTimeoutStartSec=, DefaultTimeoutStopSec=, DefaultTimeoutAbortSec=, DefaultRestartSec= TimeoutStartSec=, TimeoutStopSec=, TimeoutAbortSec= RestartSec= ( systemd.service(5) ). DefaultTimeoutStartSec= TimeoutSec= . DefaultTimeoutStartSec= DefaultTimeoutStopSec= . DefaultTimeoutAbortSec= TimeoutStopSec= (fall back) . DefaultRestartSec= 100 ms . . DefaultDeviceTimeoutSec= . x-systemd.device-timeout= /etc/fstab /etc/crypttab ( systemd.mount(5) crypttab(5) ). . . DefaultStartLimitIntervalSec=, DefaultStartLimitBurst= StartLimitIntervalSec= StartLimitBurst= . systemd.service(5) . DefaultStartLimitIntervalSec= 10s . DefaultStartLimitBurst= 5 . . ReloadLimitIntervalSec=, ReloadLimitBurst= daemon-reload ( ) daemon-reexec. . . ReloadLimitIntervalSec= ReloadLimitBurst= . . EventLoopRateLimitIntervalSec=, EventLoopRateLimitBurst= (main event loop) . EventLoopRateLimitIntervalSec= EventLoopRateLimitBurst= . EventLoopRateLimitIntervalSec= 1s . EventLoopRateLimitBurst= 50000 . systemd.event_loop_ratelimit_interval_sec= systemd.event_loop_ratelimit_burst= . . MinimumUptimeSec= (uptime) . 15s . . . reboot() . . . . . (ENVIRONMENT) DefaultEnvironment= . . environ(7) . /proc/PID/environ . "%" . : DefaultEnvironment="VAR1=word1 word2" VAR2=word3 "VAR3=word 5 6" "VAR1", "VAR2", "VAR3" . . ManagerEnvironment= . DefaultEnvironment= ( ) . . . (reload) (reexecute) . . DefaultEnvironment= /proc/PID/environ . . systemd Known Environment Variables[3] . "%" . . DefaultMemoryZSwapWriteback= . true . MemoryZSwapWriteback= . systemd.resource-control(5) . . (SPECIFIERS) DefaultEnvironment= ManagerEnvironment= . : . +-------------------------------+--------------------------------+-----------------------------------------+ | | | | +-------------------------------+--------------------------------+-----------------------------------------+ |"%a" | | | | | | | | | | | | | | . | | | | | | | | x86 x86-64 arm64. | | | | | | | | | | | | | | | | | | | | ConditionArchitecture= | | | | systemd.unit(5) | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%A" | | | | | | | | | | | | | | | | | | | | | | | | | | IMAGE_VERSION= | | | | /etc/os-release | | | | . | | | | | | | | | | | | | | | | . | | | | | | | | os-release(5) | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%b" | | | | | | | | | | | | | | | | | | . | | | | | | | | random(4) | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%B" | | | | | | | | | | | | | | | | | | | | | | BUILD_ID= | | | | /etc/os-release | | | | . | | | | | | | | | | | | | | | | . | | | | | | | | os-release(5) | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%H" | | | | | | | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%l" | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%m" | | | | | | | | | | | | | | | | | | . | | | | | | | | machine-id(5) | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%M" | | | | | | | | | | | | | | | | | | | | | | IMAGE_ID= | | | | /etc/os-release | | | | . | | | | | | | | | | | | | | | | . | | | | | | | | os-release(5) | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%o" | | | | | | | | | | | | | | | | | | | | | | ID= /etc/os-release | | | | . | | | | | | | | os-release(5) | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%v" | | | | | | uname -r. | +-------------------------------+--------------------------------+-----------------------------------------+ |"%w" | | | | | | | | | | | | | | | | | | | | | | VERSION_ID= | | | | /etc/os-release | | | | . | | | | | | | | | | | | | | | | . | | | | | | | | os-release(5) | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%W" | | | | | | | | | | | | | | | | | | | | | | VARIANT_ID= | | | | /etc/os-release | | | | . | | | | | | | | | | | | | | | | . | | | | | | | | os-release(5) | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%T" | | /tmp | | | | "$TMPDIR" | | | | "$TEMP" "$TMP" | | | | . | | | | ( | | | | | | | | | | | | | | | | | | | | .) | +-------------------------------+--------------------------------+-----------------------------------------+ |"%V" | | /var/tmp | | | | | | | | "$TMPDIR" "$TEMP" "$TMP" | | | | | | | | . ( | | | | | | | | | | | | | | | | | | | | .) | +-------------------------------+--------------------------------+-----------------------------------------+ |"%h" | | | | | | | | | | | | | | | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%u" | | | | | | | | | | | | | | | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%U" | | | | | | (UID) | | | | | | | | | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%g" | | | | | | | | | | | | | | | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%G" | | | | | | (GID) | | | | | | | | | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%s" | | (shell) | | | | | | | | | | | | | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ |"%%" | | | | | | | | | | "%%" | | | | "%" | | | | . | +-------------------------------+--------------------------------+-----------------------------------------+ (HISTORY) systemd 252 DefaultBlockIOAccounting= . cgroup . systemd 258 DefaultCPUAccounting= CPU cgroup . (SEE ALSO) systemd(1), systemd.directives(7), systemd.exec(5), systemd.service(5), environ(7), capabilities(7) (NOTES) 1. . /usr/local/ . 2. No New Privileges Flag https://docs.kernel.org/userspace-api/no_new_privs.html 3. Known Environment Variables https://systemd.io/ENVIRONMENT systemd 261.2 SYSTEMD-SYSTEM.CONF(5)