f5ca2eb481
based on this bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=915834 It seems that setting the Temp file system to ro overly restricts access to it such that other applications (like ssh), can't function properly. That seems like a error to fix in systemd to me, but regardless we obviously cant use TempDirectory=/path:ro if its going to impact other applications like that. Instead specify a specific RuntimeDirectory that systemd can clean up for us, and modify irqbalance and irqbalance-ui to create the comms socket there. Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
19 lines
454 B
Desktop File
19 lines
454 B
Desktop File
[Unit]
|
|
Description=irqbalance daemon
|
|
Documentation=man:irqbalance(1)
|
|
Documentation=https://github.com/Irqbalance/irqbalance
|
|
ConditionVirtualization=!container
|
|
|
|
[Service]
|
|
EnvironmentFile=/path/to/irqbalance.env
|
|
ExecStart=/usr/sbin/irqbalance --foreground $IRQBALANCE_ARGS
|
|
CapabilityBoundingSet=
|
|
NoNewPrivileges=yes
|
|
ReadOnlyPaths=/
|
|
ReadWritePaths=/proc/irq
|
|
RestrictAddressFamilies=AF_UNIX
|
|
RuntimeDirectory=irqbalance/
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|