# swap only if needed
vm.swappiness = 1

# sysctl kernel.unprivileged_userns_clone
kernel.unprivileged_userns_clone = 1
