# Root-owned so a checkout or revert in the repo-symlinked slice unit cannot rewrite it.
#
# ManagedOOM lives here rather than on user@.service: each manager pushes its own
# ManagedOOM cgroup list to systemd-oomd over varlink, so `systemctl --user
# daemon-reload` re-arms a slice the user manager owns, while it silently
# unregisters user@<uid>.service, which only the system manager reports.
#
# Pressure only. No memory ceiling: a fixed byte or percentage figure cannot distinguish a
# legitimate 35G build from a runaway. A sustained 60% memory stall can. Swap stays at 0 —
# thrash here is what destroys the disk, and that is a rate, not a size.
[Slice]
MemorySwapMax=0
ManagedOOMMemoryPressure=kill
ManagedOOMMemoryPressureLimit=60%