# sshd is the rescue path: if it stops answering, an unattended box needs a finger
# on a reset button. memory.min keeps its pages off the reclaim list, the weights
# keep it schedulable while agents saturate CPU and IO, and OOMScoreAdjust makes it
# the global OOM killer's last choice.
# MemoryMin here only resolves non-zero because system.slice.d reserves an
# ancestor share — cgroup-v2 caps memory.min by every ancestor's protection.
[Service]
MemoryMin=64M
CPUWeight=10000
IOWeight=10000
OOMScoreAdjust=-900