CgroupAutomount=yes
ConstrainDevices=yes
TaskAffinity=yes
ConstrainCores=yes
ConstrainRAMSpace=yes
ConstrainKmemSpace=no
AllowedDevicesFile={{ slurm_dir }}/etc/cgroup_allowed_devices.conf