From 19fcec84d8d7d21e796c7624e521b60d28ee21ed Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 20:45:59 +0200 Subject: Adding upstream version 16.2.11+ds. Signed-off-by: Daniel Baumann --- systemd/ceph-immutable-object-cache@.service.in | 29 +++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 systemd/ceph-immutable-object-cache@.service.in (limited to 'systemd/ceph-immutable-object-cache@.service.in') diff --git a/systemd/ceph-immutable-object-cache@.service.in b/systemd/ceph-immutable-object-cache@.service.in new file mode 100644 index 000000000..62ff8dbd2 --- /dev/null +++ b/systemd/ceph-immutable-object-cache@.service.in @@ -0,0 +1,29 @@ +[Unit] +Description=Ceph immutable object cache daemon +After=network-online.target local-fs.target +Wants=network-online.target local-fs.target +PartOf=ceph-immutable-object-cache.target + +[Service] +Environment=CLUSTER=ceph +EnvironmentFile=-@SYSTEMD_ENV_FILE@ +ExecReload=/bin/kill -HUP $MAINPID +ExecStart=/usr/bin/ceph-immutable-object-cache -f --cluster ${CLUSTER} --id %i --setuser ceph --setgroup ceph +LockPersonality=true +MemoryDenyWriteExecute=true +NoNewPrivileges=true +PrivateDevices=yes +PrivateTmp=true +ProtectControlGroups=true +ProtectHome=true +ProtectHostname=true +ProtectKernelLogs=true +ProtectKernelModules=true +ProtectKernelTunables=true +ProtectSystem=full +Restart=on-failure +RestrictSUIDSGID=true +StartLimitBurst=3 + +[Install] +WantedBy=ceph-immutable-object-cache.target -- cgit v1.2.3