mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2025-01-18 08:06:16 +01:00
f9927e8d36
Since 257 DynamicUser sets PrivateTmp=disconnected making debuginfod unable to read/write to /var/tmp/ properly hampering debuginfod's functioning.
25 lines
626 B
Django/Jinja
25 lines
626 B
Django/Jinja
[Unit]
|
|
Description=debuginfod server
|
|
After=network.target network-online.target nss-lookup.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
Environment=TMPDIR=/var/tmp
|
|
ExecStart=/usr/bin/debuginfod -d {{debuginfod_database}} -p {{debuginfod_port}} -F -Z .tar.zst=zstdcat {{debuginfod_package_path}}
|
|
Restart=on-failure
|
|
DynamicUser=yes
|
|
PrivateTmp=yes
|
|
PrivateDevices=true
|
|
PrivateUsers=true
|
|
ProtectKernelTunables=true
|
|
ProtectControlGroups=true
|
|
ProtectKernelLogs=true
|
|
ProtectKernelModules=true
|
|
MemoryDenyWriteExecute=true
|
|
RestrictRealtime=true
|
|
ReadOnlyPaths={{debuginfod_package_path}}
|
|
CacheDirectory=debuginfod
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|