shaba/one
1
0
Fork 0
mirror of https://github.com/OpenNebula/one.git synced 2025-01-05 09:17:41 +03:00
Code Releases Wiki Activity
00de361452
one/share/pkgs/services/systemd/opennebula-sunstone.service

41 lines
1.3 KiB
SYSTEMD
Raw Normal View History

feature #2697: add systemd init scripts for CentOS 7 Based on openSUSE systemd scripts by Robert Schweikert *.service files go in /lib/systemd/system opennebula.conf goes in /lib/tmpfiles.d sunstone, oneflow and onegate lose the *.error log files. That information can be retrieved using systemctl status, for example for sunstone: systemctl status -l opennebula-sunstone
2014-11-26 20:07:30 +03:00
[Unit]
Description=OpenNebula Web UI Server
F #1737: Improve systemd support (#1772)
2018-02-21 19:06:20 +03:00
After=syslog.target network.target
feature #2697: add systemd init scripts for CentOS 7 Based on openSUSE systemd scripts by Robert Schweikert *.service files go in /lib/systemd/system opennebula.conf goes in /lib/tmpfiles.d sunstone, oneflow and onegate lose the *.error log files. That information can be retrieved using systemctl status, for example for sunstone: systemctl status -l opennebula-sunstone
2014-11-26 20:07:30 +03:00
After=opennebula.service
F #1737: Improve systemd support (#1772)
2018-02-21 19:06:20 +03:00
Wants=opennebula-novnc.service
AssertFileNotEmpty=/var/lib/one/.one/sunstone_auth
feature #2697: add systemd init scripts for CentOS 7 Based on openSUSE systemd scripts by Robert Schweikert *.service files go in /lib/systemd/system opennebula.conf goes in /lib/tmpfiles.d sunstone, oneflow and onegate lose the *.error log files. That information can be retrieved using systemctl status, for example for sunstone: systemctl status -l opennebula-sunstone
2014-11-26 20:07:30 +03:00
[Service]
Type=simple
Group=oneadmin
User=oneadmin
F #5555: Improve Sunstone systemd hardening (#1529) - Set CAP_NET_BIND_SERVICE capability to allow binding to 80 - Hide directories with SSH keys
2021-10-15 17:44:11 +03:00
AmbientCapabilities=CAP_NET_BIND_SERVICE
B #6034 Fix log rotation (#2415) * Revert "F #5328: Update logrotate behavior to avoid long restarts (#2275)". This reverts commit 6b1127f180bcc4416bec3b7226629b392dd18737. * B #5328: Don't wait for log compressing * B #6034: Don't overwrite logs While having already `copytruncate` in logroate we don't need to implement signaling and re-openning files. * L #-: Linting
2022-12-12 13:50:54 +03:00
ExecStartPre=-/usr/sbin/logrotate -f /etc/logrotate.d/opennebula-sunstone -s /var/lib/one/.logrotate.status
B #6282: Fix Incorrect configuration of systemd services (#2831)
2023-11-22 14:45:36 +03:00
ExecStartPre=-/bin/sh -c 'for file in /var/log/one/sunstone*.log; do if [ ! -f "$file.gz" ]; then gzip -9 "$file"; fi; done'
feature #2697: add systemd init scripts for CentOS 7 Based on openSUSE systemd scripts by Robert Schweikert *.service files go in /lib/systemd/system opennebula.conf goes in /lib/tmpfiles.d sunstone, oneflow and onegate lose the *.error log files. That information can be retrieved using systemctl status, for example for sunstone: systemctl status -l opennebula-sunstone
2014-11-26 20:07:30 +03:00
ExecStart=/usr/bin/ruby /usr/lib/one/sunstone/sunstone-server.rb
F #5555: Secutiry options to Sunstone systemd unit Co-authored-by: Vlastimil Holer <vholer@opennebula.io>
2021-10-11 15:48:25 +03:00
ReadWriteDirectories=/var/lib/one /var/log/one/
ReadOnlyDirectories=-/var/lib/one/remotes
InaccessibleDirectories=-/var/lib/one/datastores
F #5555: Improve Sunstone systemd hardening (#1529) - Set CAP_NET_BIND_SERVICE capability to allow binding to 80 - Hide directories with SSH keys
2021-10-15 17:44:11 +03:00
InaccessibleDirectories=-/var/lib/one/.ssh
InaccessibleDirectories=-/var/lib/one/.ssh-oneprovision
F #5555: Secutiry options to Sunstone systemd unit Co-authored-by: Vlastimil Holer <vholer@opennebula.io>
2021-10-11 15:48:25 +03:00
ReadWriteDirectories=/var/tmp
PrivateTmp=no
NoNewPrivileges=yes
PrivateDevices=yes
# ProtectSystem=strict is not known by old systemd, so we set
# full everywhere, and override by strict only where supported.
ProtectSystem=full
ProtectSystem=strict
ProtectHome=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectKernelLogs=yes
B #3183: Service restart window (#3723) Lower restart window from 300 to 60 seconds for existing services opennebula and openenbula-scheduler, set same restart mechanism to the rest of services.
2019-09-18 11:05:16 +03:00
StartLimitInterval=60
StartLimitBurst=3
Restart=on-failure
RestartSec=5
F #1149: add systemd units SyslogIdentifier
2022-05-09 14:42:50 +03:00
SyslogIdentifier=opennebula-sunstone
feature #2697: add systemd init scripts for CentOS 7 Based on openSUSE systemd scripts by Robert Schweikert *.service files go in /lib/systemd/system opennebula.conf goes in /lib/tmpfiles.d sunstone, oneflow and onegate lose the *.error log files. That information can be retrieved using systemctl status, for example for sunstone: systemctl status -l opennebula-sunstone
2014-11-26 20:07:30 +03:00
[Install]
WantedBy=multi-user.target
Copy Permalink