While not directly answering your question, we (facebook) use oomd[0] widely
across our fleet to solve the exact problem you have. I'd be happy to answer any
questions about it. It should (if configured correctly) be much more reliable
than
a global memory.max and less heavy handed. In theory,
Hi Vito,
This is a very cool idea.
I've recently started thinking about replacing rsyslog with journald across
a large production fleet. However, it's still in the early stages of planning.
Using this to provide backwards compatibility with /var/log/messages could
be a very interesting idea.
