Fix: IPFS Kubo could use unlimited resources

In observations on multiple CRNs and CCNs,
it seems to use around 700-900 MB.

Limiting the resources to 2GB and hard to 4GB
seems therefore sensible.

Author: hoh

packaging/aleph-vm/etc/ipfs/kubo.json

@@ -9,9 +9,12 @@
     "Strategy": "roots"
   },
   "Swarm": {
-    "EnableHolePunching":false,
+    "EnableHolePunching": false,
     "RelayService": {
       "Enabled": false
+    },
+    "ResourceMgr": {
+      "MaxMemory": "1GB"
     }
   }
-}
+}

packaging/aleph-vm/etc/systemd/system/ipfs.service

@@ -50,6 +50,8 @@ ProtectHome=true
 RemoveIPC=true
 RestrictSUIDSGID=true
 CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+MemoryHigh=2G
+MemoryMax=4G
 
 # enable for 1-1024 port listening
 #AmbientCapabilities=CAP_NET_BIND_SERVICE