ms2k/quorate
SHA256
Watch
0
Code Releases Activity

ce7cb702218693d08ea6d83464d2457c9250027c

Browse source
This commit is contained in:
ms2k 2026-11-12 20:46:28 +09:00
commit 34c5f8963c
1 changed files with 145336 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

34
services/oci-l4-relay-guest/image/systemd/oci-l4-relay-telemetry.service Normal file
View file

@ -0,0 +1,34 @@
[Unit]
Description=Report sanitized OCI L4 relay telemetry
After=nftables.service oci-l4-relay-bootstrap.service
ConditionPathExists=/etc/oci-l4-relay/config.json
[Service]
Type=oneshot
ExecStart=/usr/local/sbin/oci-l4-relay-guest telemetry
LogNamespace=oci-l4-relay
RuntimeDirectory=oci-l4-relay-telemetry
RuntimeDirectoryMode=0755
RuntimeDirectoryPreserve=yes
CapabilityBoundingSet=CAP_NET_ADMIN
LockPersonality=true
MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateDevices=true
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectHostname=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict
RestrictAddressFamilies=AF_UNIX AF_INET AF_NETLINK
RestrictNamespaces=true
RestrictRealtime=true
RestrictSUIDSGID=true
StandardError=journal+console
StandardOutput=journal+console
SystemCallArchitectures=native
SystemCallFilter=@system-service