From 4a4ae2ddea626805a4cff6540358eb2f7b129c8e Mon Sep 17 00:00:00 2001
From: chn <chn@chn.moe>
Date: Sat, 12 Apr 2025 18:45:15 +0800
Subject: [PATCH] modules.services.slurm: prevent slurmctld from using swap

---
 modules/services/slurm.nix | 19 ++++++++-----------
 1 file changed, 8 insertions(+), 11 deletions(-)

diff --git a/modules/services/slurm.nix b/modules/services/slurm.nix
index dcc0b429..c5eda575 100644
--- a/modules/services/slurm.nix
+++ b/modules/services/slurm.nix
@@ -181,16 +181,13 @@ inputs:
         };
         munge = { enable = true; password = inputs.config.sops.secrets."munge.key".path; };
       };
-      systemd =
-      {
-        services.slurmd.environment =
-          let gpus = slurm.node.${inputs.config.nixos.model.hostname}.gpus or null;
-          in inputs.lib.mkIf (gpus != null)
-          {
-            CUDA_PATH = "${inputs.pkgs.cudatoolkit}";
-            LD_LIBRARY_PATH = "${inputs.config.hardware.nvidia.package}/lib";
-          };
-      };
+      systemd.services.slurmd.environment =
+        let gpus = slurm.node.${inputs.config.nixos.model.hostname}.gpus or null;
+        in inputs.lib.mkIf (gpus != null)
+        {
+          CUDA_PATH = "${inputs.pkgs.cudatoolkit}";
+          LD_LIBRARY_PATH = "${inputs.config.hardware.nvidia.package}/lib";
+        };
       sops.secrets."munge.key" =
       {
         format = "binary";
@@ -229,7 +226,7 @@ inputs:
       };
       systemd =
       {
-        services.slurmctld.after = [ "suid-sgid-wrappers.service" ];
+        services.slurmctld = { after = [ "suid-sgid-wrappers.service" ]; serviceConfig.MemorySwapMax = "0"; };
         tmpfiles.rules = [ "d /var/log/slurmctld 700 slurm slurm" ];
       };
       sops =