Merge pull request #129 from briandowns/issue-128

add kernel setting for vm.overcommit_memory=1

install.sh

@@ -80,6 +80,7 @@ fi
 #     Enable all options to allow RKE2 to run in CIS mode if set to true. This 
 #     will add an "etcd" system user and will update the following kernel 
 #     parameters and set them to the necessary values:
+#         vm.overcommit_memory=1
 #         vm.panic_on_oom=0
 #         kernel.panic=10
 #         kernel.panic_on_oops=1
@@ -883,9 +884,9 @@ setup_etcd_user() {
 # update_kernel_params adjusts the necessary kernel parameters
 # to allow RKE2 to run in CIS mode.
 update_kernel_params() {
-    for param in vm.panic_on_oom=0 kernel.panic=10 kernel.panic_on_oops=1 kernel.keys.root_maxbytes=25000000; do
-        sysctl -w ${param}
-        echo ${param} >> /etc/sysctl.d/local.conf
+    for param in vm.panic_on_oom=0 kernel.panic=10 kernel.panic_on_oops=1 kernel.keys.root_maxbytes=25000000 vm.overcommit_memory=1; do
+        ${SUDO} sysctl -w ${param}
+        echo ${param} | ${SUDO} tee -a /etc/sysctl.d/local.conf
     done
 }