]>
Commit | Line | Data |
---|---|---|
7c673cae FG |
1 | [Unit] |
2 | Description=Ceph metadata server daemon | |
7c673cae | 3 | PartOf=ceph-mds.target |
f91f0fd5 TL |
4 | After=network-online.target local-fs.target time-sync.target |
5 | Before=remote-fs-pre.target ceph-mds.target | |
6 | Wants=network-online.target local-fs.target time-sync.target remote-fs-pre.target ceph-mds.target | |
7c673cae FG |
7 | |
8 | [Service] | |
7c673cae | 9 | Environment=CLUSTER=ceph |
f67539c2 | 10 | EnvironmentFile=-@SYSTEMD_ENV_FILE@ |
7c673cae | 11 | ExecReload=/bin/kill -HUP $MAINPID |
f67539c2 TL |
12 | ExecStart=/usr/bin/ceph-mds -f --cluster ${CLUSTER} --id %i --setuser ceph --setgroup ceph |
13 | LimitNOFILE=1048576 | |
14 | LimitNPROC=1048576 | |
11fdf7f2 TL |
15 | LockPersonality=true |
16 | MemoryDenyWriteExecute=true | |
17 | NoNewPrivileges=true | |
7c673cae | 18 | PrivateDevices=yes |
f67539c2 | 19 | PrivateTmp=true |
11fdf7f2 | 20 | ProtectControlGroups=true |
7c673cae | 21 | ProtectHome=true |
f67539c2 TL |
22 | ProtectHostname=true |
23 | ProtectKernelLogs=true | |
11fdf7f2 TL |
24 | ProtectKernelModules=true |
25 | ProtectKernelTunables=true | |
7c673cae | 26 | ProtectSystem=full |
7c673cae | 27 | Restart=on-failure |
f67539c2 | 28 | RestrictSUIDSGID=true |
7c673cae | 29 | StartLimitBurst=3 |
f67539c2 TL |
30 | StartLimitInterval=30min |
31 | TasksMax=infinity | |
7c673cae FG |
32 | |
33 | [Install] | |
34 | WantedBy=ceph-mds.target |