diff options
| author | Dmitry Ilvokhin <d@ilvokhin.com> | 2026-10-08 18:57:29 +0100 |
|---|---|---|
| committer | Dmitry Ilvokhin <d@ilvokhin.com> | 2026-10-13 12:33:17 +0100 |
| commit | 541b03b2a13c3958b3dfa8b0fed814df701dc5fe (patch) | |
| tree | 3f4a292eaca74adc94eb403635bb16de1463c4e3 /roles | |
| parent | b44e8fed2adb39858ff9aa7067436f5e1af2fa2b (diff) | |
| download | infra-541b03b2a13c3958b3dfa8b0fed814df701dc5fe.tar.gz infra-541b03b2a13c3958b3dfa8b0fed814df701dc5fe.tar.bz2 infra-541b03b2a13c3958b3dfa8b0fed814df701dc5fe.zip | |
Adjust perf_event_paranoid to allow kernel profiling
Linux kernel default [1] paranoia level is 2, which means unprivilage
users can to profiler kernel.
On my boxes only trusted users have an account (at least for now), so it
is fine for them to be able to profile kernel, even if it creates
security concerns.
[1]: 0161028b7c8a ("perf/core: Change the default paranoia level to 2")
Diffstat (limited to 'roles')
| -rw-r--r-- | roles/dev/meta/main.yml | 2 | ||||
| -rw-r--r-- | roles/dev/tasks/main.yml | 2 | ||||
| -rw-r--r-- | roles/gdb/meta/main.yml | 1 | ||||
| -rw-r--r-- | roles/netfwd/meta/main.yml | 2 | ||||
| -rw-r--r-- | roles/perf/files/99-perf-event-paranoid.conf | 1 | ||||
| -rw-r--r-- | roles/perf/meta/main.yml | 2 | ||||
| -rw-r--r-- | roles/perf/tasks/main.yml | 15 | ||||
| -rw-r--r-- | roles/sysctl/handlers/main.yml (renamed from roles/netfwd/handlers/main.yml) | 0 |
8 files changed, 22 insertions, 3 deletions
diff --git a/roles/dev/meta/main.yml b/roles/dev/meta/main.yml index f7423dc..2c6ca2a 100644 --- a/roles/dev/meta/main.yml +++ b/roles/dev/meta/main.yml @@ -4,4 +4,4 @@ dependencies: - role: vim - role: go - role: devtools - - role: debuginfod + - role: perf diff --git a/roles/dev/tasks/main.yml b/roles/dev/tasks/main.yml index 8c06ea9..b6956c2 100644 --- a/roles/dev/tasks/main.yml +++ b/roles/dev/tasks/main.yml @@ -4,8 +4,6 @@ - gcc - clang - python - - perf - - debuginfod - autoconf - make - cmake diff --git a/roles/gdb/meta/main.yml b/roles/gdb/meta/main.yml index 4aa0127..5f28894 100644 --- a/roles/gdb/meta/main.yml +++ b/roles/gdb/meta/main.yml @@ -1,2 +1,3 @@ dependencies: - role: users + - role: debuginfod diff --git a/roles/netfwd/meta/main.yml b/roles/netfwd/meta/main.yml new file mode 100644 index 0000000..e5e0e39 --- /dev/null +++ b/roles/netfwd/meta/main.yml @@ -0,0 +1,2 @@ +dependencies: + - role: sysctl diff --git a/roles/perf/files/99-perf-event-paranoid.conf b/roles/perf/files/99-perf-event-paranoid.conf new file mode 100644 index 0000000..7968763 --- /dev/null +++ b/roles/perf/files/99-perf-event-paranoid.conf @@ -0,0 +1 @@ +kernel.perf_event_paranoid = 1 diff --git a/roles/perf/meta/main.yml b/roles/perf/meta/main.yml new file mode 100644 index 0000000..e5e0e39 --- /dev/null +++ b/roles/perf/meta/main.yml @@ -0,0 +1,2 @@ +dependencies: + - role: sysctl diff --git a/roles/perf/tasks/main.yml b/roles/perf/tasks/main.yml new file mode 100644 index 0000000..25c291a --- /dev/null +++ b/roles/perf/tasks/main.yml @@ -0,0 +1,15 @@ +- name: Install perf + ansible.builtin.package: + name: + - perf + state: present + +- name: Configure perf event paranoid + ansible.builtin.copy: + src: files/99-perf-event-paranoid.conf + dest: /etc/sysctl.d/99-perf-event-paranoid.conf + owner: root + group: root + mode: u+rw,g+r,o+r + notify: + - Restart systemd-sysctl diff --git a/roles/netfwd/handlers/main.yml b/roles/sysctl/handlers/main.yml index 0e5f805..0e5f805 100644 --- a/roles/netfwd/handlers/main.yml +++ b/roles/sysctl/handlers/main.yml |