infra.git/roles/netfwd, branch masterAnsible playbooks for personal infrastructure.https://git.ilvokhin.com/infra.git/atom/roles/netfwd?h=master2026-10-13T11:33:17ZAdjust perf_event_paranoid to allow kernel profiling2026-10-13T11:33:17ZDmitry Ilvokhind@ilvokhin.com2026-10-08T17:57:29Zurn:sha1:541b03b2a13c3958b3dfa8b0fed814df701dc5fe
Linux kernel default [1] paranoia level is 2, which means unprivilage
users can to profiler kernel.
On my boxes only trusted users have an account (at least for now), so it
is fine for them to be able to profile kernel, even if it creates
security concerns.
[1]: 0161028b7c8a ("perf/core: Change the default paranoia level to 2")
Migrate netfwd to systemd-sysctl2024-06-01T18:12:52ZDmitry Ilvokhind@ilvokhin.com2024-06-01T18:12:52Zurn:sha1:c593b0c5ed0395c4fe31d074cfaf2e2657ae0856
/etc/sysctl.conf doesn't work, see [1]. Intrestingly enough, I catched
it only with system upgrade and reboot. Just reboot didn't catch it for
some reason, or I didn't notice.
[1]: https://wiki.archlinux.org/title/sysctl
Move sysctl net forwarding to separate role2024-05-26T18:35:21ZDmitry Ilvokhind@ilvokhin.com2024-05-26T18:26:04Zurn:sha1:a8e1f9e775c575a4ac1d0d2aa946dbf0e765e031