From 541b03b2a13c3958b3dfa8b0fed814df701dc5fe Mon Sep 17 00:00:00 2001
From: Dmitry Ilvokhin <d@ilvokhin.com>
Date: Thu, 8 Oct 2026 18:57:29 +0100
Subject: Adjust perf_event_paranoid to allow kernel profiling

Linux kernel default [1] paranoia level is 2, which means unprivilage
users can to profiler kernel.

On my boxes only trusted users have an account (at least for now), so it
is fine for them to be able to profile kernel, even if it creates
security concerns.

[1]: 0161028b7c8a ("perf/core: Change the default paranoia level to 2")
---
 roles/perf/tasks/main.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 roles/perf/tasks/main.yml

(limited to 'roles/perf/tasks/main.yml')

diff --git a/roles/perf/tasks/main.yml b/roles/perf/tasks/main.yml
new file mode 100644
index 0000000..25c291a
--- /dev/null
+++ b/roles/perf/tasks/main.yml
@@ -0,0 +1,15 @@
+- name: Install perf
+  ansible.builtin.package:
+    name:
+      - perf
+    state: present
+
+- name: Configure perf event paranoid
+  ansible.builtin.copy:
+    src: files/99-perf-event-paranoid.conf
+    dest: /etc/sysctl.d/99-perf-event-paranoid.conf
+    owner: root
+    group: root
+    mode: u+rw,g+r,o+r
+  notify:
+    - Restart systemd-sysctl
-- 
cgit v1.3.1