diff --git a/software/service-files/software-controller-daemon.service b/software/service-files/software-controller-daemon.service
index e55733f8..cdfc521e 100644
--- a/software/service-files/software-controller-daemon.service
+++ b/software/service-files/software-controller-daemon.service
@@ -13,6 +13,16 @@ PIDFile=/var/run/software-controller-daemon.pid
 # process recovery is handled by pmon
 Restart=no
 
+# cgroup performance engineering
+# - software-controller-daemon.service does not provide latency critical service
+# - several processes are 100% cpu hog and use significant disk IO
+#   (eg, sysinv-app, system CLI, ansible-playbooks, etc)
+# - set 1/8th default share
+# - set lower IO priority (effective only with 'bfq' scheduler)
+CPUShares=128
+Nice=19
+IOSchedulingClass=best-effort
+IOSchedulingPriority=7
+
 [Install]
 WantedBy=multi-user.target
-
diff --git a/software/service-files/software.service b/software/service-files/software.service
index 15893e90..f38802b0 100644
--- a/software/service-files/software.service
+++ b/software/service-files/software.service
@@ -11,5 +11,16 @@ RemainAfterExit=yes
 StandardOutput=journal+console
 StandardError=journal+console
 
+# cgroup performance engineering
+# - software.service does not provide latency critical service
+# - several processes are 100% cpu hog, and/or use significant disk IO
+#   (eg, /usr/bin/software-agent, ostree, etc)
+# - set 1/8th default share
+# - set lower IO priority (effective only with 'bfq' scheduler)
+CPUShares=128
+Nice=19
+IOSchedulingClass=best-effort
+IOSchedulingPriority=7
+
 [Install]
 WantedBy=multi-user.target
diff --git a/sw-patch/bin/sw-patch-agent.service b/sw-patch/bin/sw-patch-agent.service
index 9ca3a253..de96e493 100644
--- a/sw-patch/bin/sw-patch-agent.service
+++ b/sw-patch/bin/sw-patch-agent.service
@@ -11,6 +11,17 @@ ExecStop=/etc/init.d/sw-patch-agent stop
 ExecReload=/etc/init.d/sw-patch-agent restart
 PIDFile=/var/run/sw-patch-agent.pid
 
+# cgroup performance engineering
+# - sw-patch-agent.service does not provide latency critical service
+# - ostree pull, ostree admin processes are 100% cpu hog;
+#   these do significant disk read and write IO
+# - set 1/8th default share
+# - set lower IO priority (effective only with 'bfq' scheduler)
+CPUShares=128
+Nice=19
+IOSchedulingClass=best-effort
+IOSchedulingPriority=7
+
 [Install]
 WantedBy=multi-user.target
 
diff --git a/sw-patch/bin/sw-patch-controller-daemon.service b/sw-patch/bin/sw-patch-controller-daemon.service
index 7b11291a..c1a94217 100644
--- a/sw-patch/bin/sw-patch-controller-daemon.service
+++ b/sw-patch/bin/sw-patch-controller-daemon.service
@@ -11,6 +11,17 @@ ExecStop=/etc/init.d/sw-patch-controller-daemon stop
 ExecReload=/etc/init.d/sw-patch-controller-daemon restart
 PIDFile=/var/run/sw-patch-controller-daemon.pid
 
+# cgroup performance engineering
+# - sw-patch-controller-daemon.service does not provide latency critical service
+#   /usr/sbin/sw-patch-controller-daemon is 100% cpu hog,
+#   and does significant disk write IO
+# - set 1/8th default share
+# - set lower IO priority (effective only with 'bfq' scheduler)
+CPUShares=128
+Nice=19
+IOSchedulingClass=best-effort
+IOSchedulingPriority=7
+
 [Install]
 WantedBy=multi-user.target