X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/741593ee2bf203c9261f604d094e3d8e621698a8..be386c1df0de49e95aaf235927d5f0cc2d7a9bb0:/cookbooks/systemd/resources/service.rb diff --git a/cookbooks/systemd/resources/service.rb b/cookbooks/systemd/resources/service.rb index 8098d51da..4b53051d3 100644 --- a/cookbooks/systemd/resources/service.rb +++ b/cookbooks/systemd/resources/service.rb @@ -17,12 +17,17 @@ # limitations under the License. # +unified_mode true + default_action :create property :service, String, :name_property => true property :dropin, String property :description, String +property :condition_path_exists, [String, Array] +property :condition_path_exists_glob, [String, Array] property :after, [String, Array] +property :conflicts, [String, Array] property :wants, [String, Array] property :type, String, :is => %w[simple forking oneshot dbus notify idle] property :limit_nofile, Integer @@ -43,6 +48,7 @@ property :exec_stop, String property :exec_reload, String property :runtime_directory, String property :runtime_directory_mode, Integer +property :runtime_max_sec, Integer property :standard_input, String, :is => %w[null tty tty-force tty-fail socket] property :standard_output, String, @@ -57,6 +63,9 @@ property :private_devices, [true, false] property :private_network, [true, false] property :protect_system, [TrueClass, FalseClass, String] property :protect_home, [TrueClass, FalseClass, String] +property :read_write_paths, [String, Array] +property :read_only_paths, [String, Array] +property :inaccessible_paths, [String, Array] property :restrict_address_families, [String, Array] property :no_new_privileges, [true, false] property :tasks_max, Integer @@ -81,7 +90,7 @@ action :create do source "environment.erb" owner "root" group "root" - mode 0o640 + mode "640" variables :environment => new_resource.environment_file end @@ -92,7 +101,7 @@ action :create do directory dropin_directory do owner "root" group "root" - mode 0o755 + mode "755" end end @@ -101,7 +110,7 @@ action :create do source "service.erb" owner "root" group "root" - mode 0o644 + mode "644" variables service_variables notifies :run, "execute[systemctl-reload]" end