Allow path accessibility to be configured for systemd services

[chef.git] / cookbooks / systemd / templates / default / service.erb

diff --git a/cookbooks/systemd/templates/default/service.erb b/cookbooks/systemd/templates/default/service.erb
index b3e0c13e297fbc2b425fa866f3ef7520ca2b29a1..6d8a603cc0c01a92c84f71dab81794ecacaedafd 100644 (file)
--- a/cookbooks/systemd/templates/default/service.erb
+++ b/cookbooks/systemd/templates/default/service.erb
@@ -1,7 +1,9 @@
 # DO NOT EDIT - This file is being maintained by Chef
 
 [Unit]
 # DO NOT EDIT - This file is being maintained by Chef
 
 [Unit]

+<% if @description -%>

 Description=<%= @description %>
 Description=<%= @description %>

+<% end -%>

 <% if @after -%>
 After=<%= Array(@after).join(" ") %>
 <% end -%>
 <% if @after -%>
 After=<%= Array(@after).join(" ") %>
 <% end -%>


@@ -10,10 +12,18 @@ Wants=<%= Array(@wants).join(" ") %>
 <% end -%>
 
 [Service]
 <% end -%>
 
 [Service]

+<% if @type -%>

 Type=<%= @type %>
 Type=<%= @type %>

+<% end -%>

 <% if @limit_nofile -%>
 LimitNOFILE=<%= @limit_nofile %>
 <% end -%>
 <% if @limit_nofile -%>
 LimitNOFILE=<%= @limit_nofile %>
 <% end -%>

+<% if @limit_as -%>
+LimitAS=<%= @limit_as %>
+<% end -%>
+<% if @limit_cpu -%>
+LimitCPU=<%= @limit_cpu %>
+<% end -%>

 <% if @memory_low -%>
 MemoryLow=<%= @memory_low %>
 <% end -%>
 <% if @memory_low -%>
 MemoryLow=<%= @memory_low %>
 <% end -%>


@@ -39,16 +49,33 @@ Group=<%= @group %>
 WorkingDirectory=<%= @working_directory %>
 <% end -%>
 <% if @exec_start_pre -%>
 WorkingDirectory=<%= @working_directory %>
 <% end -%>
 <% if @exec_start_pre -%>

+<% if @dropin -%>
+ExecStartPre=
+<% end -%>

 ExecStartPre=<%= @exec_start_pre %>
 <% end -%>
 ExecStartPre=<%= @exec_start_pre %>
 <% end -%>

+<% if @exec_start -%>
+<% if @dropin -%>
+ExecStart=
+<% end -%>

 ExecStart=<%= @exec_start %>
 ExecStart=<%= @exec_start %>

+<% end -%>

 <% if @exec_start_post -%>
 <% if @exec_start_post -%>

+<% if @dropin -%>
+ExecStartPost=
+<% end -%>

 ExecStartPost=<%= @exec_start_post %>
 <% end -%>
 <% if @exec_stop -%>
 ExecStartPost=<%= @exec_start_post %>
 <% end -%>
 <% if @exec_stop -%>

+<% if @dropin -%>
+ExecStop=
+<% end -%>

 ExecStop=<%= @exec_stop %>
 <% end -%>
 <% if @exec_reload -%>
 ExecStop=<%= @exec_stop %>
 <% end -%>
 <% if @exec_reload -%>

+<% if @dropin -%>
+ExecReload=
+<% end -%>

 ExecReload=<%= @exec_reload %>
 <% end -%>
 <% if @runtime_directory -%>
 ExecReload=<%= @exec_reload %>
 <% end -%>
 <% if @runtime_directory -%>


@@ -81,9 +108,24 @@ ProtectSystem=<%= @protect_system %>
 <% if @protect_home -%>
 ProtectHome=<%= @protect_home %>
 <% end -%>
 <% if @protect_home -%>
 ProtectHome=<%= @protect_home %>
 <% end -%>

+<% if @read_write_paths -%>
+ReadWritePaths=<%= Array(@read_write_paths).join(" ") %>
+<% end -%>
+<% if @read_only_paths -%>
+ReadOnlyPaths=<%= Array(@read_only_paths).join(" ") %>
+<% end -%>
+<% if @inaccessible_paths -%>
+InaccessiblePaths=<%= Array(@inaccessible_paths).join(" ") %>
+<% end -%>
+<% if @restrict_address_families -%>
+RestrictAddressFamilies=<%= Array(@restrict_address_families).join(" ") %>
+<% end -%>

 <% if @no_new_privileges -%>
 NoNewPrivileges=<%= @no_new_privileges %>
 <% end -%>
 <% if @no_new_privileges -%>
 NoNewPrivileges=<%= @no_new_privileges %>
 <% end -%>

+<% if @tasks_max -%>
+TasksMax=<%= @tasks_max %>
+<% end -%>

 <% if @success_exit_status -%>
 SuccessExitStatus=<%= Array(@success_exit_status).join(" ") %>
 <% end -%>
 <% if @success_exit_status -%>
 SuccessExitStatus=<%= Array(@success_exit_status).join(" ") %>
 <% end -%>


@@ -96,6 +138,20 @@ TimeoutSec=<%= @timeout_sec %>
 <% if @pid_file -%>
 PIDFile=<%= @pid_file %>
 <% end -%>
 <% if @pid_file -%>
 PIDFile=<%= @pid_file %>
 <% end -%>

+<% if @nice -%>
+Nice=<%= @nice %>
+<% end -%>
+<% if @io_scheduling_class -%>
+IOSchedulingClass=<%= @io_scheduling_class %>
+<% end -%>
+<% if @io_scheduling_priority -%>
+IOSchedulingPriority=<%= @io_scheduling_priority %>
+<% end -%>
+<% if @kill_mode -%>
+KillMode=<%= @kill_mode %>
+<% end -%>
+<% unless @dropin -%>

 
 [Install]
 WantedBy=multi-user.target
 
 [Install]
 WantedBy=multi-user.target

+<% end -%>