- 512 -> 1024MB vm memory (had sporadic oom-failures with the lower setting) - set "auth_allow_insecure_global_id_reclaim=false" as described here: https://docs.ceph.com/en/latest/security/CVE-2021-20288/