Zbigniew Jędrzejewski-Szmek
3061ec2707
Let's make systemd-sysupdate easy to call. It was added in 2021 and it's around to stay and not "experimental" in any way.
35 lines
1.0 KiB
Desktop File
35 lines
1.0 KiB
Desktop File
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
#
|
|
# This file is part of systemd.
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
|
|
[Unit]
|
|
Description=Automatic System Update
|
|
Documentation=man:systemd-sysupdate.service(8)
|
|
Wants=network-online.target
|
|
After=network-online.target
|
|
ConditionVirtualization=!container
|
|
|
|
[Service]
|
|
Type=simple
|
|
NotifyAccess=main
|
|
ExecStart=systemd-sysupdate update
|
|
CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CAP_SETFCAP CAP_SYS_ADMIN CAP_SETPCAP CAP_DAC_OVERRIDE CAP_LINUX_IMMUTABLE
|
|
NoNewPrivileges=yes
|
|
MemoryDenyWriteExecute=yes
|
|
ProtectHostname=yes
|
|
RestrictRealtime=yes
|
|
RestrictNamespaces=net
|
|
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
|
|
SystemCallFilter=@system-service @mount
|
|
SystemCallErrorNumber=EPERM
|
|
SystemCallArchitectures=native
|
|
LockPersonality=yes
|
|
|
|
[Install]
|
|
Also=systemd-sysupdate.timer
|