Blame clients/cloud-setup/nm-cloud-setup.service.in
|
Packit Service |
b23acc |
[Unit]
|
|
Packit Service |
b23acc |
Description=Automatically configure NetworkManager in cloud
|
|
Packit Service |
b23acc |
After=NetworkManager.service
|
|
Packit Service |
b23acc |
|
|
Packit Service |
b23acc |
[Service]
|
|
Packit Service |
b23acc |
Type=oneshot
|
|
Packit Service |
b23acc |
ExecStart=@libexecdir@/nm-cloud-setup
|
|
Packit Service |
b23acc |
|
|
Packit Service |
b23acc |
#Environment=NM_CLOUD_SETUP_LOG=TRACE
|
|
Packit Service |
b23acc |
|
|
Packit Service |
b23acc |
# Cloud providers are disabled by default. You need to
|
|
Packit Service |
b23acc |
# Opt-in by setting the right environment variable for
|
|
Packit Service |
b23acc |
# the provider.
|
|
Packit Service |
b23acc |
#Environment=NM_CLOUD_SETUP_EC2=yes
|
|
Packit Service |
b23acc |
#Environment=NM_CLOUD_SETUP_GCP=yes
|
|
Packit Service |
b23acc |
|
|
Packit Service |
b23acc |
CapabilityBoundingSet=
|
|
Packit Service |
b23acc |
LockPersonality=yes
|
|
Packit Service |
b23acc |
MemoryDenyWriteExecute=yes
|
|
Packit Service |
b23acc |
NoNewPrivileges=yes
|
|
Packit Service |
b23acc |
PrivateDevices=yes
|
|
Packit Service |
b23acc |
PrivateTmp=yes
|
|
Packit Service |
b23acc |
ProtectControlGroups=yes
|
|
Packit Service |
b23acc |
ProtectHome=yes
|
|
Packit Service |
9a5bed |
#ProtectHostname=yes
|
|
Packit Service |
9a5bed |
#ProtectKernelLogs=yes
|
|
Packit Service |
b23acc |
ProtectKernelModules=yes
|
|
Packit Service |
b23acc |
ProtectKernelTunables=yes
|
|
Packit Service |
b23acc |
ProtectSystem=strict
|
|
Packit Service |
b23acc |
RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
|
|
Packit Service |
b23acc |
RestrictNamespaces=yes
|
|
Packit Service |
b23acc |
RestrictRealtime=yes
|
|
Packit Service |
9a5bed |
#RestrictSUIDSGID=yes
|
|
Packit Service |
b23acc |
SystemCallFilter=@system-service
|
|
Packit Service |
b23acc |
|
|
Packit Service |
b23acc |
[Install]
|
|
Packit Service |
b23acc |
WantedBy=NetworkManager.service
|