efab2725ea
libcapng is issuing an error in the system log when irqbalance attempts
to drop capabilities, but systemd service unit has already done dropped
all capabilities. commit 43751df tried to fix this but it didn't fix it
completely. CapabilityBoundingSet also need to be dropped.
Fixes #182
Signed-off-by: Kairui Song <kasong@redhat.com>
18 lines
462 B
Desktop File
18 lines
462 B
Desktop File
[Unit]
|
|
Description=irqbalance daemon
|
|
Documentation=man:irqbalance(1)
|
|
Documentation=https://github.com/Irqbalance/irqbalance
|
|
ConditionVirtualization=!container
|
|
|
|
[Service]
|
|
EnvironmentFile=-/usr/lib/irqbalance/defaults.env
|
|
EnvironmentFile=-/path/to/irqbalance.env
|
|
ExecStart=/usr/sbin/irqbalance --foreground $IRQBALANCE_ARGS
|
|
ReadOnlyPaths=/
|
|
ReadWritePaths=/proc/irq
|
|
RestrictAddressFamilies=AF_UNIX
|
|
RuntimeDirectory=irqbalance/
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|