From 25957105c900950ffc2cb1c2c3830215dae88be0 Mon Sep 17 00:00:00 2001
From: Tom Alexander <tom@fizz.buzz>
Date: Sat, 27 Sep 2025 19:02:06 -0400
Subject: [PATCH] Add support for preventing OOM kill on certain VMs.

---
 ansible/roles/bhyve/files/bhyverc.bash                 | 5 +++++
 ansible/roles/package_manager/files/freeze_kernel.conf | 2 +-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/ansible/roles/bhyve/files/bhyverc.bash b/ansible/roles/bhyve/files/bhyverc.bash
index 80def0a..f2e4c99 100644
--- a/ansible/roles/bhyve/files/bhyverc.bash
+++ b/ansible/roles/bhyve/files/bhyverc.bash
@@ -38,6 +38,7 @@ fi
 : ${VNC_WIDTH:="1920"}
 : ${VNC_HEIGHT:="1080"}
 : ${BIND9P:=""}
+: ${PREVENT_OOM:="NO"}
 : "${CD:=}"
 
 : ${SHUTDOWN_TIMEOUT:="600"} # 10 minutes
@@ -278,6 +279,10 @@ function start_body {
     local mac_address
     mac_address=$(calculate_mac_address "$name")
 
+    if [ "$PREVENT_OOM" = "YES" ]; then
+        protect -d -i -p "$$"
+    fi
+
     local additional_args=()
 
     if [ "$NETWORK" = "NAT" ]; then
diff --git a/ansible/roles/package_manager/files/freeze_kernel.conf b/ansible/roles/package_manager/files/freeze_kernel.conf
index e03e3c3..8102118 100644
--- a/ansible/roles/package_manager/files/freeze_kernel.conf
+++ b/ansible/roles/package_manager/files/freeze_kernel.conf
@@ -1,2 +1,2 @@
 [options]
-IgnorePkg   = linux linux-headers
+IgnorePkg   = linux linux-headers chromium