summarylogtreecommitdiffstats
path: root/sheepit-client.service
diff options
context:
space:
mode:
authorJturnerusa2020-09-16 17:53:26 -0400
committerJturnerusa2020-09-16 17:53:26 -0400
commit88e23badf8dcb5effd411c6f34148f73a98fc1cd (patch)
treec8abc93a795d45a01d6b756e0e79358cef020380 /sheepit-client.service
parent0305a7d0aad08c1daff77335bbef3aaa30093f3d (diff)
downloadaur-88e23badf8dcb5effd411c6f34148f73a98fc1cd.tar.gz
Able to run the client like a regular program rather than needing systemd. Added tmpfiles conf file to auto generate the sheepit users home dir. Added a few more sandboxing options to the systemd service.
Diffstat (limited to 'sheepit-client.service')
-rw-r--r--sheepit-client.service5
1 files changed, 4 insertions, 1 deletions
diff --git a/sheepit-client.service b/sheepit-client.service
index c1a0730f745..8a090216e40 100644
--- a/sheepit-client.service
+++ b/sheepit-client.service
@@ -9,9 +9,12 @@ NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateDevices=true
+ProtectKernelTunables=true
+ProtectControlGroups=true
RestrictNamespaces=true
CacheDirectory=sheepit-client/
-ExecStart=/usr/bin/sheepit-client
+CacheDirectoryMode=700
+ExecStart=/usr/bin/sheepit-client -config /etc/conf.d/sheepit-client
RestartSec=60
Restart=on-failure