diff --git a/fboss-image/image_builder/templates/centos-09.0/root_files/etc/security/limits.d/99-fboss-nofile.conf b/fboss-image/image_builder/templates/centos-09.0/root_files/etc/security/limits.d/99-fboss-nofile.conf
new file mode 100644
index 0000000000000..4728d15a31bd5
--- /dev/null
+++ b/fboss-image/image_builder/templates/centos-09.0/root_files/etc/security/limits.d/99-fboss-nofile.conf
@@ -0,0 +1,4 @@
+# Raise root's default nofile cap for hw tests that open one fd set per
+# transceiver slot (e.g. qsfp_hw_test on high-port-count platforms).
+root soft nofile 65536
+root hard nofile 65536