end
end
+package "initramfs-tools"
+
execute "update-initramfs" do
action :nothing
command "update-initramfs -u -k all"
munin = device
end
- next if device.nil?
+ next if device.nil? || munin.nil?
Hash[
:device => device,
prometheus_collector "smart" do
interval "15m"
user "root"
- capability_bounding_set "CAP_SYS_ADMIN"
+ capability_bounding_set %w[CAP_DAC_OVERRIDE CAP_SYS_ADMIN CAP_SYS_RAWIO]
private_devices false
private_users false
protect_clock false
interval "15m"
user "root"
proc_subset "all"
- capability_bounding_set "CAP_SYS_ADMIN"
+ capability_bounding_set %w[CAP_DAC_OVERRIDE CAP_SYS_ADMIN]
private_devices false
private_users false
protect_clock false
+ protect_kernel_modules false
end