albatross/packaging/Linux/albatross_daemon.service

[Unit]
Description=Albatross VMM daemon (albatrossd)
Requires=albatross_console.service albatross_log.service
After=syslog.target albatross_console.service albatross_log.service

[Service]
Type=simple
# TODO not necessarily needs to be run as root, anything that can solo5-spt/hvt,
#  create tap interfaces should be fine!
User=root
ExecStart=/usr/local/sbin/albatrossd --tmpdir="%t/albatross/" -vv
#RuntimeDirectoryPreserve=yes
#RuntimeDirectory=albatross
PIDFile=%t/albatross/daemon.pid

## hardening stuff
ProtectSystem=full
ProtectHome=true
#UMask=0077
OOMScoreAdjust=-1000
#AppArmorProfile=
#SmackProcessLabel=albatross_vmm
IgnoreSIGPIPE=true
#SystemCallFilter=~reboot
#SystemCallFilter=
#RestrictAddressFamilies=AF_UNIX
#RuntimeDirectoryMode=0700

[Install]
WantedBy=multi-user.target
systemd services, based on ee49c6240aa2cf2c9dac47eff6c751ce8c17efb5 by @cfcs 2019-11-21 12:29:22 +00:00			`[Unit]`
			`Description=Albatross VMM daemon (albatrossd)`
packaging/linux: cleanups of systemd scripts - console creates the run directories (albatross albatross/fifo albatross/util) -> log depends on console - albatross/fifo needs special permission (albatross_daemon creates fifo there, albatross_console needs to read them) - use /var/lib/albatross/albatross.log for the log file - only require root in albatross_daemon, use user albatross in albatross_console and albatross_log - defer albatross_stat for now 2020-04-03 14:34:30 +00:00			`Requires=albatross_console.service albatross_log.service`
			`After=syslog.target albatross_console.service albatross_log.service`

systemd services, based on ee49c6240aa2cf2c9dac47eff6c751ce8c17efb5 by @cfcs 2019-11-21 12:29:22 +00:00			`[Service]`
			`Type=simple`
			`# TODO not necessarily needs to be run as root, anything that can solo5-spt/hvt,`
			`# create tap interfaces should be fine!`
			`User=root`
packaging/linux: cleanups of systemd scripts - console creates the run directories (albatross albatross/fifo albatross/util) -> log depends on console - albatross/fifo needs special permission (albatross_daemon creates fifo there, albatross_console needs to read them) - use /var/lib/albatross/albatross.log for the log file - only require root in albatross_daemon, use user albatross in albatross_console and albatross_log - defer albatross_stat for now 2020-04-03 14:34:30 +00:00			`ExecStart=/usr/local/sbin/albatrossd --tmpdir="%t/albatross/" -vv`
			`#RuntimeDirectoryPreserve=yes`
			`#RuntimeDirectory=albatross`
			`PIDFile=%t/albatross/daemon.pid`
systemd services, based on ee49c6240aa2cf2c9dac47eff6c751ce8c17efb5 by @cfcs 2019-11-21 12:29:22 +00:00
			`## hardening stuff`
			`ProtectSystem=full`
			`ProtectHome=true`
packaging/linux: cleanups of systemd scripts - console creates the run directories (albatross albatross/fifo albatross/util) -> log depends on console - albatross/fifo needs special permission (albatross_daemon creates fifo there, albatross_console needs to read them) - use /var/lib/albatross/albatross.log for the log file - only require root in albatross_daemon, use user albatross in albatross_console and albatross_log - defer albatross_stat for now 2020-04-03 14:34:30 +00:00			`#UMask=0077`
systemd services, based on ee49c6240aa2cf2c9dac47eff6c751ce8c17efb5 by @cfcs 2019-11-21 12:29:22 +00:00			`OOMScoreAdjust=-1000`
			`#AppArmorProfile=`
			`#SmackProcessLabel=albatross_vmm`
			`IgnoreSIGPIPE=true`
			`#SystemCallFilter=~reboot`
			`#SystemCallFilter=`
packaging/linux: cleanups of systemd scripts - console creates the run directories (albatross albatross/fifo albatross/util) -> log depends on console - albatross/fifo needs special permission (albatross_daemon creates fifo there, albatross_console needs to read them) - use /var/lib/albatross/albatross.log for the log file - only require root in albatross_daemon, use user albatross in albatross_console and albatross_log - defer albatross_stat for now 2020-04-03 14:34:30 +00:00			`#RestrictAddressFamilies=AF_UNIX`
systemd services, based on ee49c6240aa2cf2c9dac47eff6c751ce8c17efb5 by @cfcs 2019-11-21 12:29:22 +00:00			`#RuntimeDirectoryMode=0700`

			`[Install]`
			`WantedBy=multi-user.target`