From 2f93dc19214aa83562edcb8569bdbef3ccbd7f53 Mon Sep 17 00:00:00 2001
From: Robin Sonnabend <robin@fsmpi.rwth-aachen.de>
Date: Sun, 19 Mar 2017 22:44:18 +0100
Subject: [PATCH] Unset kernel key storage quota after update to stretch

---
 nfs-client/tasks/main.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/nfs-client/tasks/main.yml b/nfs-client/tasks/main.yml
index e6a90fb..9cd5804 100644
--- a/nfs-client/tasks/main.yml
+++ b/nfs-client/tasks/main.yml
@@ -49,6 +49,16 @@
     - sysctl
     - config
 
+- name: stretch has a reasonable default value for the kernel key storage size
+  sysctl: name=kernel.keys.root_maxkeys state=absent
+  when: debian_version == "stretch"
+  notify:
+    - reload sysctl
+  tags:
+    - nfs-client
+    - sysctl
+    - config
+
 # makes life much easier to have an automounter and not /etc/fstab
 - name: ensure automounter is installed
   apt: name=autofs state=latest
-- 
GitLab