# Room for the test suites PoM now schedules.
#
# The base unit caps the whole cgroup at 256M, which is generous for the daemon
# and nowhere near a cargo build. The suites run as child processes in this same
# cgroup, so the cap applies to them: left at 256M every scheduled run would be
# OOM-killed and land in the dashboard as a failing suite. astra has 125G.
#
# 48G rather than 16G because the MNW server workspace blew through 16G and 20G
# of swap before dying. run-ci.sh also caps cargo's job count: 96 cores means 96
# concurrent rustc processes by default, and the memory ceiling is the wrong
# place to discover that.
#
# ProtectHome drops to read-only rather than staying true because the staging
# clones fetch from the mirrors under /home/max/git-mirrors. Read-only is the
# whole requirement: nothing here writes outside /var/lib/pom.
[Service]
MemoryMax=48G
ProtectHome=read-only
Environment=HOME=/var/lib/pom
Environment=CARGO_HOME=/var/lib/pom/.cargo
Environment=RUSTUP_HOME=/var/lib/pom/.rustup
LimitNOFILE=65536