- Edited
Hello forum,
If you may, please provide input on what to add in the following service file conversion, there must be more to add:
systemd version:
If you may, please provide input on what to add in the following service file conversion, there must be more to add:
systemd version:
[Unit]
Description=Userspace KSM helper daemon
ConditionPathExists=/proc/self/ksm
[Service]
Type=forking
User=uksmd
Group=uksmd
DynamicUser=true
CapabilityBoundingSet=CAP_SYS_PTRACE CAP_DAC_OVERRIDE
AmbientCapabilities=CAP_SYS_PTRACE CAP_DAC_OVERRIDE
PrivateNetwork=yes
RestrictAddressFamilies=AF_UNIX
RestrictNamespaces=true
PrivateDevices=true
NoNewPrivileges=true
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectSystem=strict
RestrictSUIDSGID=true
SystemCallArchitectures=native
RestrictRealtime=true
LockPersonality=true
MemoryDenyWriteExecute=true
RemoveIPC=true
UMask=066
ProtectHostname=true
IPAddressDeny=any
SystemCallFilter=@ system-service
SystemCallFilter=~@ privileged
ExecStart=/usr/bin/uksmd
[Install]
WantedBy=multi-user.target
my 66 version:
[main]
@ type = longrun
@ version = 0.0.1
@ description = "Userspace KSM helper daemon"
@ user = ( root )
@ options = ( log env )
[start]
@ execute = ( /usr/bin/uksmd )
[environment]
?
output of # 66-inservice uksmd Name : uksmd
Version : 0.0.1
In tree : root
Status : enabled, down (exitcode 111) 0 seconds, normally up, want up, ready 0 seconds
Type : longrun
Description : Userspace KSM helper daemon
Source : /usr/lib/66/service/uksmd
Live : /run/66/tree/0/root/servicedirs/uksmd
Dependencies : uksmd-log
External dependencies : None
Optional dependencies : None
Start script : /usr/bin/uksmd
Stop script : None
Environment source : /etc/66/conf/uksmd/0.0.1
Environment file : Log name : uksmd-log
Log destination : /var/log/66/uksmd
Log file :
2020-12-01 01:40:57.862928825 execl-envfile: fatal: unable to prepare modified environment of: uksmd