Comments on 2018-10-21 Cro as a Service?

As a user I’m expecting a working systemd file provided. Systemd can solve some of these problems and more.

– AlexDaniel 2018-10-22 12:29 UTC


If you have more information for what you’d need, I’d love to hear it. Sadly, the only systemd thing I ever did was my backup solution...

– Alex Schroeder 2018-10-22 12:35 UTC


Thanks for pointing me at this gist.

NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=read-only
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
RestrictRealtime=yes
PrivateTmp=yes
PrivateDevices=yes
PrivateUsers=yes

Other things you mentioned in IRC:

MemoryMax and TasksMax should be used. Restart=always and RestartSec=2 is fine. Watchdog needs to be implemented.

– Alex Schroeder 2018-10-22 12:47 UTC


Please make sure you contribute only your own work, or work licensed under the GNU Free Documentation License. Note: in order to facilitate peer review and fight vandalism, we will store your IP number for a number of days. See Privacy Policy for more information. See Info for text formatting rules. You can edit this page if you need to fix typos. You can subscribe to updates by email without leaving a comment.

To save this page you must answer this question:

Please say HELLO.