systemd/units/systemd-sysupdate.service.in

#  SPDX-License-Identifier: LGPL-2.1-or-later
#
#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and/or modify it
#  under the terms of the GNU Lesser General Public License as published by
#  the Free Software Foundation; either version 2.1 of the License, or
#  (at your option) any later version.

[Unit]
Description=Automatic System Update
Documentation=man:systemd-sysupdate.service(8)
Wants=network-online.target
After=network-online.target
ConditionVirtualization=!container

[Service]
Type=simple
NotifyAccess=main
ExecStart={{LIBEXECDIR}}/systemd-sysupdate update
CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CAP_SETFCAP CAP_SYS_ADMIN CAP_SETPCAP CAP_DAC_OVERRIDE CAP_LINUX_IMMUTABLE
NoNewPrivileges=yes
MemoryDenyWriteExecute=yes
ProtectHostname=yes
RestrictRealtime=yes
RestrictNamespaces=net
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
SystemCallFilter=@system-service @mount
SystemCallErrorNumber=EPERM
SystemCallArchitectures=native
LockPersonality=yes

[Install]
Also=systemd-sysupdate.timer
unit: add units for new "systemd-sysupdate" tool These unit (if enabled) will try to update the OS in regular intervals. Moreover, every day in the early morning this will attempt to reboot the system if there's a newer version installed than running. 2021-06-16 13:00:34 +03:00			`# SPDX-License-Identifier: LGPL-2.1-or-later`
			`#`
			`# This file is part of systemd.`
			`#`
			`# systemd is free software; you can redistribute it and/or modify it`
			`# under the terms of the GNU Lesser General Public License as published by`
			`# the Free Software Foundation; either version 2.1 of the License, or`
			`# (at your option) any later version.`

			`[Unit]`
			`Description=Automatic System Update`
			`Documentation=man:systemd-sysupdate.service(8)`
			`Wants=network-online.target`
			`After=network-online.target`
			`ConditionVirtualization=!container`

			`[Service]`
			`Type=simple`
			`NotifyAccess=main`
Drop split-usr and unmerged-usr support As previously announced, execute order 66: https://lists.freedesktop.org/archives/systemd-devel/2022-September/048352.html The meson options split-usr, rootlibdir and rootprefix become no-ops that print a warning if they are set to anything other than the default values. We can remove them in a future release. 2023-06-12 04:15:19 +03:00			`ExecStart={{LIBEXECDIR}}/systemd-sysupdate update`
unit: add units for new "systemd-sysupdate" tool These unit (if enabled) will try to update the OS in regular intervals. Moreover, every day in the early morning this will attempt to reboot the system if there's a newer version installed than running. 2021-06-16 13:00:34 +03:00			`CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CAP_SETFCAP CAP_SYS_ADMIN CAP_SETPCAP CAP_DAC_OVERRIDE CAP_LINUX_IMMUTABLE`
			`NoNewPrivileges=yes`
			`MemoryDenyWriteExecute=yes`
			`ProtectHostname=yes`
			`RestrictRealtime=yes`
			`RestrictNamespaces=net`
			`RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6`
			`SystemCallFilter=@system-service @mount`
			`SystemCallErrorNumber=EPERM`
			`SystemCallArchitectures=native`
			`LockPersonality=yes`

			`[Install]`
			`Also=systemd-sysupdate.timer`