# Root-owned so a checkout or revert in the repo-symlinked slice unit cannot rewrite it. # # ManagedOOM lives here rather than on user@.service: each manager pushes its own # ManagedOOM cgroup list to systemd-oomd over varlink, so `systemctl --user # daemon-reload` re-arms a slice the user manager owns, while it silently # unregisters user@.service, which only the system manager reports. # # Pressure only. No memory ceiling and no swap kill: zram makes swap fullness the normal # steady state here, and a fixed byte or percentage figure cannot distinguish heavy agent # work from a runaway. A sustained 60% memory stall can. [Slice] ManagedOOMSwap=auto ManagedOOMMemoryPressure=kill ManagedOOMMemoryPressureLimit=60%