# Backstop for allocations that reach neither agent.slice nor build.slice, which is how
# 38G once escaped every ceiling. The system manager owns this, so a `systemctl --user
# daemon-reload` unregisters it until the next system reload — the slice drop-ins carry
# the durable guarantee and this only widens the net when it happens to be armed.
#
# The limit is deliberately far above the slice limits: this cgroup contains the desktop
# session, so anything lower kills the user's own applications rather than a runaway.
[Service]
ManagedOOMSwap=kill
ManagedOOMMemoryPressure=kill
ManagedOOMMemoryPressureLimit=80%