diff options
Diffstat (limited to 'systemd/ceph-mgr@.service.in')
| -rw-r--r-- | systemd/ceph-mgr@.service.in | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/systemd/ceph-mgr@.service.in b/systemd/ceph-mgr@.service.in new file mode 100644 index 00000000..0ff9db23 --- /dev/null +++ b/systemd/ceph-mgr@.service.in @@ -0,0 +1,33 @@ +[Unit] +Description=Ceph cluster manager daemon +PartOf=ceph-mgr.target +After=network-online.target local-fs.target time-sync.target +Before=remote-fs-pre.target ceph-mgr.target +Wants=network-online.target local-fs.target time-sync.target remote-fs-pre.target ceph-mgr.target + +[Service] +LimitNOFILE=1048576 +LimitNPROC=1048576 +EnvironmentFile=-@SYSTEMD_ENV_FILE@ +Environment=CLUSTER=ceph +ExecStart=/usr/bin/ceph-mgr -f --cluster ${CLUSTER} --id %i --setuser ceph --setgroup ceph +ExecReload=/bin/kill -HUP $MAINPID +LockPersonality=true +# We need to disable this protection as some python libraries generate +# dynamic code, like python-cffi, and require mmap calls to succeed +MemoryDenyWriteExecute=false +NoNewPrivileges=true +PrivateDevices=yes +ProtectControlGroups=true +ProtectHome=true +ProtectKernelModules=true +ProtectKernelTunables=true +ProtectSystem=full +PrivateTmp=true +Restart=on-failure +RestartSec=10 +StartLimitInterval=30min +StartLimitBurst=3 + +[Install] +WantedBy=ceph-mgr.target |