unable to join session keyring: unable to create session key: disk quota exceeded

[lotas]

Task running podman experienced following issue:

“unable to join session keyring: unable to create session key: disk quota exceeded” error

Possible solution:

/proc/sys/kernel/keys/maxkeys  = 200
/proc/sys/kernel/keys/maxbytes  = 20000

What is a safe limit and is it the correct solution?

https://github.com/taskcluster/taskcluster/pull/7219/checks?check_run_id=29479831956

https://community-tc.services.mozilla.com/tasks/Yip0h5z0TvWwggLAjiR5Mg/runs/0/logs/public/logs/live.log#L46

containers/podman#13363 (comment)

[petemoore]

Note, the fix for this probably belongs in community-tc-config repo, but there may be value for putting some docs in this repo under Linux installation notes, to highlight if "standard" values are typically insufficient and worker deployers are encouraged to bump them.

[jcristau]

Bumping that limit sounds ok to me, another option would be to disable keyring creation in the podman config.