REBUILD.md maps a full rebuild (PVE qm spec incl. nested-virt flag, guest OS/accounts/dotfiles bootstrap, script order, package baseline, verification checklist). 14-capture-state.sh regenerates docs/state snapshots (guest apt/units/sysctl/fstab/docker + PVE 5111 config). Docs sync: stale multiqueue-owed text removed from NEXT/REPORT/RUNBOOK; README script list + open-work list current. Details: https://projects.knownelement.com/issues/615
274 lines
14 KiB
Plaintext
274 lines
14 KiB
Plaintext
|
|
72 unit files listed.
|
|
accounts-daemon.service enabled enabled
|
|
anacron.service enabled enabled
|
|
anacron.timer enabled enabled
|
|
apparmor.service enabled enabled
|
|
apt-daily.timer enabled enabled
|
|
apt-daily-upgrade.timer enabled enabled
|
|
avahi-daemon.service enabled enabled
|
|
avahi-daemon.socket enabled enabled
|
|
beszel-agent.service enabled enabled
|
|
beszel-agent-update.timer enabled enabled
|
|
bluetooth.service enabled enabled
|
|
boinc-client.service enabled enabled
|
|
conman.service enabled enabled
|
|
console-setup.service enabled enabled
|
|
containerd.service enabled enabled
|
|
cron.service enabled enabled
|
|
cups-browsed.service enabled enabled
|
|
cups.path enabled enabled
|
|
cups.service enabled enabled
|
|
cups.socket enabled enabled
|
|
docker.service enabled enabled
|
|
docker.socket enabled enabled
|
|
dpkg-db-backup.timer enabled enabled
|
|
drkonqi-coredump-processor@.service enabled enabled
|
|
e2scrub_all.timer enabled enabled
|
|
e2scrub_reap.service enabled enabled
|
|
fstrim.timer enabled enabled
|
|
fwupd-refresh.timer enabled enabled
|
|
getty@.service enabled enabled
|
|
glances.service enabled enabled
|
|
grub-common.service enabled enabled
|
|
keyboard-setup.service enabled enabled
|
|
libvirtd-admin.socket enabled enabled
|
|
libvirtd-ro.socket enabled enabled
|
|
libvirtd.service enabled enabled
|
|
libvirtd.socket enabled enabled
|
|
libvirt-guests.service enabled enabled
|
|
lm-sensors.service enabled enabled
|
|
logrotate.timer enabled enabled
|
|
machines.target enabled enabled
|
|
man-db.timer enabled enabled
|
|
microvm-net.service enabled enabled
|
|
ModemManager.service enabled enabled
|
|
networking.service enabled enabled
|
|
NetworkManager-dispatcher.service enabled enabled
|
|
NetworkManager.service enabled enabled
|
|
NetworkManager-wait-online.service enabled enabled
|
|
power-profiles-daemon.service enabled enabled
|
|
remote-fs.target enabled enabled
|
|
sddm.service enabled enabled
|
|
smartmontools.service enabled enabled
|
|
sshd-keygen.service enabled enabled
|
|
ssh.service enabled enabled
|
|
switcheroo-control.service enabled enabled
|
|
systemd-pstore.service enabled enabled
|
|
systemd-timesyncd.service enabled enabled
|
|
tailscaled.service enabled enabled
|
|
udisks2.service enabled enabled
|
|
ukrrs-builder-prune.timer enabled enabled
|
|
ukrrs-dayprofile.timer enabled enabled
|
|
ukrrs-gateway-ensure.service enabled enabled
|
|
ukrrs-net-multiqueue.service enabled enabled
|
|
ukrrs-nightprofile.timer enabled enabled
|
|
ukrrs-psi-textfile.timer enabled enabled
|
|
ukrrs-thp-madvise.service enabled enabled
|
|
UNIT FILE STATE PRESET
|
|
virtlogd-admin.socket enabled enabled
|
|
virtlogd.service enabled enabled
|
|
virtlogd.socket enabled enabled
|
|
wpa_supplicant.service enabled enabled
|
|
wtmpdb-update-boot.service enabled enabled
|
|
xrdp.service enabled enabled
|
|
xrdp-sesman.service enabled enabled
|
|
===CUSTOM-UNITS
|
|
/etc/systemd/system/beszel-agent.service
|
|
/etc/systemd/system/beszel-agent-update.service
|
|
/etc/systemd/system/beszel-agent-update.timer
|
|
/etc/systemd/system/bluetooth.target.wants/bluetooth.service
|
|
/etc/systemd/system/dbus-fi.w1.wpa_supplicant1.service
|
|
/etc/systemd/system/dbus-org.bluez.service
|
|
/etc/systemd/system/dbus-org.freedesktop.Avahi.service
|
|
/etc/systemd/system/dbus-org.freedesktop.ModemManager1.service
|
|
/etc/systemd/system/dbus-org.freedesktop.nm-dispatcher.service
|
|
/etc/systemd/system/dbus-org.freedesktop.timesync1.service
|
|
/etc/systemd/system/default.target.wants/wtmpdb-update-boot.service
|
|
/etc/systemd/system/display-manager.service
|
|
/etc/systemd/system/getty.target.wants/getty@tty1.service
|
|
/etc/systemd/system/graphical.target.wants/accounts-daemon.service
|
|
/etc/systemd/system/graphical.target.wants/power-profiles-daemon.service
|
|
/etc/systemd/system/graphical.target.wants/switcheroo-control.service
|
|
/etc/systemd/system/graphical.target.wants/udisks2.service
|
|
/etc/systemd/system/hibernate.target.wants/grub-common.service
|
|
/etc/systemd/system/hybrid-sleep.target.wants/grub-common.service
|
|
/etc/systemd/system/microvm-net.service
|
|
/etc/systemd/system/multi-user.target.wants/anacron.service
|
|
/etc/systemd/system/multi-user.target.wants/avahi-daemon.service
|
|
/etc/systemd/system/multi-user.target.wants/beszel-agent.service
|
|
/etc/systemd/system/multi-user.target.wants/boinc-client.service
|
|
/etc/systemd/system/multi-user.target.wants/conman.service
|
|
/etc/systemd/system/multi-user.target.wants/console-setup.service
|
|
/etc/systemd/system/multi-user.target.wants/containerd.service
|
|
/etc/systemd/system/multi-user.target.wants/cron.service
|
|
/etc/systemd/system/multi-user.target.wants/cups-browsed.service
|
|
/etc/systemd/system/multi-user.target.wants/cups.path
|
|
/etc/systemd/system/multi-user.target.wants/cups.service
|
|
/etc/systemd/system/multi-user.target.wants/docker.service
|
|
/etc/systemd/system/multi-user.target.wants/e2scrub_reap.service
|
|
/etc/systemd/system/multi-user.target.wants/glances.service
|
|
/etc/systemd/system/multi-user.target.wants/grub-common.service
|
|
/etc/systemd/system/multi-user.target.wants/libvirtd.service
|
|
/etc/systemd/system/multi-user.target.wants/libvirt-guests.service
|
|
/etc/systemd/system/multi-user.target.wants/lm-sensors.service
|
|
/etc/systemd/system/multi-user.target.wants/machines.target
|
|
/etc/systemd/system/multi-user.target.wants/microvm-net.service
|
|
/etc/systemd/system/multi-user.target.wants/ModemManager.service
|
|
/etc/systemd/system/multi-user.target.wants/networking.service
|
|
/etc/systemd/system/multi-user.target.wants/NetworkManager.service
|
|
/etc/systemd/system/multi-user.target.wants/open-terminal@COS-RCEO.service
|
|
/etc/systemd/system/multi-user.target.wants/open-terminal@COS-TSG.service
|
|
/etc/systemd/system/multi-user.target.wants/open-terminal@COS-WFO.service
|
|
/etc/systemd/system/multi-user.target.wants/open-terminal@reachableceo-offstage.service
|
|
/etc/systemd/system/multi-user.target.wants/open-terminal@reachableceo.service
|
|
/etc/systemd/system/multi-user.target.wants/open-terminal@TSGBOD.service
|
|
/etc/systemd/system/multi-user.target.wants/open-terminal@TSGCCO.service
|
|
/etc/systemd/system/multi-user.target.wants/open-terminal@TSGCOO.service
|
|
/etc/systemd/system/multi-user.target.wants/open-terminal@TSGCTO.service
|
|
/etc/systemd/system/multi-user.target.wants/remote-fs.target
|
|
/etc/systemd/system/multi-user.target.wants/smartmontools.service
|
|
/etc/systemd/system/multi-user.target.wants/ssh.service
|
|
/etc/systemd/system/multi-user.target.wants/tailscaled.service
|
|
/etc/systemd/system/multi-user.target.wants/ukrrs-gateway-ensure.service
|
|
/etc/systemd/system/multi-user.target.wants/ukrrs-net-multiqueue.service
|
|
/etc/systemd/system/multi-user.target.wants/ukrrs-thp-madvise.service
|
|
/etc/systemd/system/multi-user.target.wants/virtlogd.service
|
|
/etc/systemd/system/multi-user.target.wants/wpa_supplicant.service
|
|
/etc/systemd/system/multi-user.target.wants/xrdp.service
|
|
/etc/systemd/system/multi-user.target.wants/xrdp-sesman.service
|
|
/etc/systemd/system/network-online.target.wants/networking.service
|
|
/etc/systemd/system/network-online.target.wants/NetworkManager-wait-online.service
|
|
/etc/systemd/system/open-terminal@.service
|
|
/etc/systemd/system/printer.target.wants/cups.service
|
|
/etc/systemd/system/smartd.service
|
|
/etc/systemd/system/sockets.target.wants/avahi-daemon.socket
|
|
/etc/systemd/system/sockets.target.wants/cups.socket
|
|
/etc/systemd/system/sockets.target.wants/docker.socket
|
|
/etc/systemd/system/sockets.target.wants/libvirtd-admin.socket
|
|
/etc/systemd/system/sockets.target.wants/libvirtd-ro.socket
|
|
/etc/systemd/system/sockets.target.wants/libvirtd.socket
|
|
/etc/systemd/system/sockets.target.wants/virtlogd-admin.socket
|
|
/etc/systemd/system/sockets.target.wants/virtlogd.socket
|
|
/etc/systemd/system/sshd.service
|
|
/etc/systemd/system/sshd.service.wants/sshd-keygen.service
|
|
/etc/systemd/system/sshd@.service.wants/sshd-keygen.service
|
|
/etc/systemd/system/ssh.service.wants/sshd-keygen.service
|
|
/etc/systemd/system/ssh.socket.wants/sshd-keygen.service
|
|
/etc/systemd/system/suspend.target.wants/grub-common.service
|
|
/etc/systemd/system/suspend-then-hibernate.target.wants/grub-common.service
|
|
/etc/systemd/system/sysinit.target.wants/apparmor.service
|
|
/etc/systemd/system/sysinit.target.wants/keyboard-setup.service
|
|
/etc/systemd/system/sysinit.target.wants/systemd-pstore.service
|
|
/etc/systemd/system/sysinit.target.wants/systemd-timesyncd.service
|
|
/etc/systemd/system/systemd-coredump@.service.wants/drkonqi-coredump-processor@.service
|
|
/etc/systemd/system/timers.target.wants/anacron.timer
|
|
/etc/systemd/system/timers.target.wants/apt-daily.timer
|
|
/etc/systemd/system/timers.target.wants/apt-daily-upgrade.timer
|
|
/etc/systemd/system/timers.target.wants/beszel-agent-update.timer
|
|
/etc/systemd/system/timers.target.wants/dpkg-db-backup.timer
|
|
/etc/systemd/system/timers.target.wants/e2scrub_all.timer
|
|
/etc/systemd/system/timers.target.wants/fstrim.timer
|
|
/etc/systemd/system/timers.target.wants/fwupd-refresh.timer
|
|
/etc/systemd/system/timers.target.wants/logrotate.timer
|
|
/etc/systemd/system/timers.target.wants/man-db.timer
|
|
/etc/systemd/system/timers.target.wants/ukrrs-builder-prune.timer
|
|
/etc/systemd/system/timers.target.wants/ukrrs-dayprofile.timer
|
|
/etc/systemd/system/timers.target.wants/ukrrs-nightprofile.timer
|
|
/etc/systemd/system/timers.target.wants/ukrrs-psi-textfile.timer
|
|
/etc/systemd/system/ukrrs-acct-reachableceo-offstage.slice
|
|
/etc/systemd/system/ukrrs-acct-reachableceo.slice
|
|
/etc/systemd/system/ukrrs-batch.slice
|
|
/etc/systemd/system/ukrrs-builder-prune.service
|
|
/etc/systemd/system/ukrrs-builder-prune.timer
|
|
/etc/systemd/system/ukrrs-dayprofile.service
|
|
/etc/systemd/system/ukrrs-dayprofile.timer
|
|
/etc/systemd/system/ukrrs-gateway-ensure.service
|
|
/etc/systemd/system/ukrrs-gateway.slice
|
|
/etc/systemd/system/ukrrs-lsp.slice
|
|
/etc/systemd/system/ukrrs-net-multiqueue.service
|
|
/etc/systemd/system/ukrrs-nightprofile.service
|
|
/etc/systemd/system/ukrrs-nightprofile.timer
|
|
/etc/systemd/system/ukrrs-pmo.slice
|
|
/etc/systemd/system/ukrrs-psi-textfile.service
|
|
/etc/systemd/system/ukrrs-psi-textfile.timer
|
|
/etc/systemd/system/ukrrs-rt.slice
|
|
/etc/systemd/system/ukrrs-thp-madvise.service
|
|
/etc/systemd/system/user-1001.slice.d/50-ukrrs.conf
|
|
/etc/systemd/system/user-1010.slice.d/50-ukrrs.conf
|
|
/etc/systemd/system/xrdp.service.d/bigres.conf
|
|
===SYSCONTROL
|
|
-- /etc/sysctl.d/60-ukrrs-vm.conf
|
|
# /etc/sysctl.d/60-ukrrs-vm.conf — ultix-streaming mixed-workload profile
|
|
# Measured-before values and rationale: ~/optimize/REPORT.md §4.1.
|
|
# Deliberately NOT touched: swappiness(60), overcommit(0), vfs_cache_pressure,
|
|
# pid_max, somaxconn(4096), conntrack(262144), autogroup(1), page-cluster(3).
|
|
|
|
# Predictable writeback under ETL bursts (bytes-based, RAM-size independent).
|
|
# Night profile (ukrrs-daynight.sh) raises these to 2G/512M.
|
|
vm.dirty_background_bytes = 268435456
|
|
vm.dirty_bytes = 1073741824
|
|
|
|
# Survive bursty reclaim when compiles+ETL hit at once. 768M post-upgrade.
|
|
vm.min_free_kbytes = 393216
|
|
|
|
# Postgres AIO / io_uring era; 9 harness daemons + LSPs watching many repos.
|
|
fs.aio-max-nr = 1048576
|
|
fs.inotify.max_user_watches = 1048576
|
|
fs.inotify.max_user_instances = 512
|
|
|
|
# 9 accounts x long-lived provider streams + tailscale + docker NAT.
|
|
net.ipv4.ip_local_port_range = 10240 65535
|
|
net.ipv4.tcp_tw_reuse = 1
|
|
|
|
# LLM turns idle minutes between bursts on live sockets; large SSE/JSON.
|
|
net.ipv4.tcp_slow_start_after_idle = 0
|
|
net.core.rmem_max = 16777216
|
|
net.core.wmem_max = 16777216
|
|
net.ipv4.tcp_rmem = 4096 131072 16777216
|
|
net.ipv4.tcp_wmem = 4096 65536 16777216
|
|
net.core.netdev_max_backlog = 8192
|
|
|
|
# BBR requires the module: staged modules-load.d/tcp_bbr.conf loads it.
|
|
# If bbr is unavailable, comment the last two lines out (cubic is fine).
|
|
net.ipv4.tcp_congestion_control = bbr
|
|
net.core.default_qdisc = fq
|
|
===FSTAB
|
|
# /etc/fstab: static file system information.
|
|
#
|
|
# Use 'blkid' to print the universally unique identifier for a
|
|
# device; this may be used with UUID= as a more robust way to name devices
|
|
# that works even if disks are added and removed. See fstab(5).
|
|
#
|
|
# systemd generates mount units based on this file, see systemd.mount(5).
|
|
# Please run 'systemctl daemon-reload' after making changes here.
|
|
#
|
|
# <file system> <mount point> <type> <options> <dump> <pass>
|
|
# / was on /dev/sda1 during installation
|
|
UUID=db07b391-d983-4a40-8752-bf1a7daf5d42 / ext4 errors=remount-ro,noatime 0 1
|
|
# swap was on /dev/sda5 during installation
|
|
UUID=611d6da8-3fd6-40f0-9239-d8825a6d256c none swap sw 0 0
|
|
/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0
|
|
|
|
#data dirs
|
|
|
|
#root@ultix-streaming:~# blkid /dev/sdc1
|
|
#/dev/sdc1: UUID="f6ce5e0d-8045-41d0-be0e-612d8b2abc02" BLOCK_SIZE="4096" TYPE="ext4" PARTUUID="5365d54a-c661-4446-a732-c0d420ef298b"
|
|
UUID=f6ce5e0d-8045-41d0-be0e-612d8b2abc02 /data1 ext4 errors=remount-ro,noatime 0 1
|
|
|
|
#root@ultix-streaming:~# blkid /dev/sdb1
|
|
#/dev/sdb1: UUID="b23e6be0-2a1c-41b7-8742-5dab39066f2e" BLOCK_SIZE="4096" TYPE="ext4" PARTUUID="b0fab633-36db-4658-9ca4-35aca7b9cb29"
|
|
UUID=b23e6be0-2a1c-41b7-8742-5dab39066f2e /data2 ext4 errors=remount-ro,noatime 0 1
|
|
===SUDOERS
|
|
total 32
|
|
drwxr-xr-x 2 root root 4096 Sep 1 11:47 .
|
|
drwxr-xr-x 156 root root 12288 Sep 1 13:20 ..
|
|
-rw-rw-r-- 1 root root 30 Jul 28 12:01 localuser
|
|
-rw-rw-r-- 1 root root 33 Jul 28 19:47 reachableceo-streaming
|
|
-r--r----- 1 root root 55 Sep 1 11:47 reachableceo-to-offstage
|
|
-r--r----- 1 root root 1068 Apr 11 07:21 README
|
|
===XRDP-DROPIN
|
|
[Service]
|
|
Environment=XRDP_GFX_MAX_COMPRESSED_BYTES=33554432
|
|
Environment=XRDP_GFX_FRAMES_IN_FLIGHT=2
|