可设置文件描述符值，如nproc和nofile linux

Question

我有下面的攻略来设置一个用户在linux的文件描述符值，我有下面的代码，这是测试和工作良好，我正在寻找是否缩短代码使用类似vars的东西。

准确地说，我希望使用模块pam_limits one，并同时介绍增加nofiles和nproc值的两个操作。

---
- name: Setting File-descriptor Values for db_user
  hosts: all
   become: yes
   become_method: sudo
   become_user: root
   tasks:
    - name: Setting-up file-max limit
      sysctl:
       name: fs.file-max
       value: '1618107'
       state: present
       reload: yes

    - name: setting-up nofile limit
      pam_limits:
       domain: db_user
       limit_type: "{{ item }}"
       limit_item: nofile
       value: '260000'
      loop:
       - soft
       - hard

    - name: setting-up nproc limit
      pam_limits:
       domain: db_user
       limit_type: "{{ item }}"
       limit_item: nproc
       value: '16383'
      loop:
       - soft
       - hard
...

Answer 1

一种方法是，你可以像下面这样使用loop，但是，我看到你的soft和hard的限制值是相同的，因此你可以更好地使用-，就像我在下面的注释中提到的那样。

---
- name: Setting File-descriptor Values for db_user
  hosts: all
  become: yes
  become_method: sudo
  become_user: root
  tasks:
    - name: Setting-up file-max limit
      sysctl:
        name: fs.file-max
        value: 1618107
        state: present
        reload: yes
    - name: Setting-up nofles and nproc limit for db_user
      pam_limits:
        domain: db_user
        limit_type: "{{item.limit_type}}"
        limit_item: "{{item.limit_item}}"
        value: "{{item.value}}"
      loop:
        # Add nofile and nproc, both soft and hard, limit for the user db_user with a comment.
        # Type "-" for enforcing both soft and hard resource limits together for more details read `man limits.conf`.
        - { limit_type: '-', limit_item: 'nofile', value: 260000 }
        - { limit_type: '-', limit_item: 'nproc', value: 16383 }