Best way to persist a systemd and kubelet config flag change, without rolling my own version

[james-masson]

I'm looking at adding support for CPU partitioning into a Bottlerocket installation.
For this, I need to:

• Add a configuration for system.slice to limit the amount of CPUs it can use
• Add an additional parameter to kubelet --system-reserved-cgroup=system

Arguably, the second parameter should be the default in Bottlerocket anyway...

How best to accomplish this, with a lot of Rust coding and rolling my own version?

The config must survive a reboot, because only on a fresh boot with this configuration are these parameters effective. I already use reboot-to-reconcile for other kernel flags.

I anticipated having a bootstrap/superpowered container to make the change, but it doesn't solve the persistence issues.