3000 lines
253 KiB
HTML
3000 lines
253 KiB
HTML
<!DOCTYPE html>
|
|
<html><head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
|
|
<title>systemd-unit.service</title>
|
|
<meta name="generator" content="KF5::SyntaxHighlighting - Definition (systemd unit) - Theme (Breeze Light)"/>
|
|
</head><body style="background-color:#ffffff;color:#1f1c1b"><pre>
|
|
<span style="color:#898887"># </span><span style="color:#ca9219;background-color:#451e1a;font-weight:bold">WARNING</span><span style="color:#898887"> : This file is NOT a valid systemd service.</span>
|
|
<span style="color:#898887"># It was created to demonstrate/test KDE syntax highlighting.</span>
|
|
<span style="color:#898887"># It includes invalid sections, option names and option values.</span>
|
|
|
|
<span style="color:#898887">; </span><span style="color:#81ca2d;background-color:#f7e6e6;font-weight:bold">NOTE</span><span style="color:#898887">: Alerts in comments are supported.</span>
|
|
|
|
|
|
<span style="font-weight:bold">[Automount]</span>
|
|
<span style="color:#0057ae">Where</span> = /the/mount/directory
|
|
<span style="color:#0057ae">ExtraOptions</span> = some,extra, mount , options, <span style="color:#3daee9">%I</span>
|
|
<span style="color:#0057ae">DirectoryMode</span> = <span style="color:#b08000">0755</span>
|
|
<span style="color:#0057ae">TimeoutIdleSec</span> = <span style="color:#b08000">5</span><span style="font-style:italic">min</span> <span style="color:#b08000">5</span><span style="font-style:italic">s</span>
|
|
|
|
|
|
<span style="font-weight:bold">[Install]</span>
|
|
<span style="color:#0057ae">Alias</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span>some.invalid <span style="color:#006e28">some_</span><span style="color:#3daee9">%b</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">WantedBy</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span><span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.socket </span>some.invalid
|
|
<span style="color:#0057ae">RequiredBy</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span><span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.socket </span>some.invalid
|
|
<span style="color:#0057ae">UpheldBy</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span><span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.socket </span>some.invalid
|
|
<span style="color:#0057ae">Also</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span><span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.socket </span>some.invalid
|
|
<span style="color:#0057ae">DefaultInstance</span> = id
|
|
|
|
|
|
<span style="font-weight:bold">[Mount]</span>
|
|
<span style="color:#0057ae">What</span> = /dev/disk/by-uuid/444c-0d9d-411e-a973-015b31acaa
|
|
<span style="color:#898887"># </span><span style="color:#81ca2d;background-color:#f7e6e6;font-weight:bold">NOTE</span><span style="color:#898887">: Since systemd version 256 fstab-style identifiers are supported too.</span>
|
|
<span style="color:#0057ae">What</span> = UUID=444c-0d9d-411e-a973-015b31acaa
|
|
<span style="color:#0057ae">Where</span> = /the/mount/directory
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">btrfs</span>
|
|
<span style="color:#0057ae">Options</span> = subvol=some_name,compress=lzo,noatime,noauto,nodev,nosuid
|
|
<span style="color:#0057ae">SloppyOptions</span> = <span style="color:#aa5500">on</span>
|
|
<span style="color:#0057ae">LazyUnmount</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">ReadWriteOnly</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">ForceUnmount</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">DirectoryMode</span> = <span style="color:#b08000">0700</span>
|
|
<span style="color:#0057ae">TimeoutSec</span> = <span style="color:#b08000">5 </span><span style="font-style:italic">m</span> <span style="color:#b08000">20 </span><span style="font-style:italic">s</span>
|
|
<span style="color:#898887"># see [Service] for options from systemd.exec and systemd.kill</span>
|
|
|
|
|
|
<span style="font-weight:bold">[Path]</span>
|
|
<span style="color:#0057ae">PathExists</span> = /some/absolute/path
|
|
<span style="color:#0057ae">PathExistsGlob</span> = /some/g<span style="color:#3daee9">[lo]</span>b<span style="color:#3daee9">*</span>
|
|
<span style="color:#0057ae">PathChanged</span> = /some/absolute/path
|
|
<span style="color:#0057ae">PathModified</span> = /some/absolute/path
|
|
<span style="color:#0057ae">DirectoryNotEmpty</span> = /some/absolute/path
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@instance</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">MakeDirectory</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">DirectoryMode</span> = <span style="color:#b08000">0700</span>
|
|
<span style="color:#0057ae">TriggerLimitIntervalSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">min</span> <span style="color:#b08000">10</span><span style="font-style:italic">sec</span>
|
|
<span style="color:#0057ae">TriggerLimitBurst</span> = <span style="color:#b08000">15</span>
|
|
|
|
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#898887">## from systemd.service</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">exec</span>
|
|
<span style="color:#0057ae">RemainAfterExit</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">GuessMainPID</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">PIDFile</span> = some/path
|
|
<span style="color:#0057ae">BusName</span> = some.name
|
|
<span style="color:#0057ae">ExecStart</span> = /usr/bin/Xorg <span style="color:#0057ae">${DISPLAY}</span> <span style="color:#0057ae">${XDG_VTNR}</span> <span style="font-weight:bold">\</span>
|
|
-logfile <span style="color:#3daee9">%t</span>/X.<span style="color:#3daee9">%i</span>.log <span style="font-weight:bold">\</span>
|
|
-nolisten tcp <span style="font-weight:bold">\</span>
|
|
-quiet
|
|
<span style="color:#0057ae">ExecStartPre</span> = <span style="color:#ff5500">@</span>/bin/start/pre some args
|
|
<span style="color:#0057ae">ExecStartPost</span> = <span style="color:#ff5500">-</span>cmd arg, <span style="color:#ff5500">@</span>cmd2 name -o <span style="color:#3daee9">\x0A</span>
|
|
<span style="color:#0057ae">ExecCondition</span> = /bin/exec/condition
|
|
<span style="color:#0057ae">ExecReload</span> = /bin/exec/reload
|
|
<span style="color:#0057ae">ExecStop</span> = /bin/kill -SIGABRT <span style="color:#0057ae">$MAINPID</span>
|
|
<span style="color:#0057ae">ExecStopPost</span> = <span style="color:#ff5500">-:!!</span>/bin/stop/post
|
|
<span style="color:#0057ae">RestartSec</span> = <span style="color:#b08000">15</span>
|
|
<span style="color:#0057ae">RestartSteps</span> = <span style="color:#b08000">2</span>
|
|
<span style="color:#0057ae">RestartMaxDelaySec</span> = <span style="color:#b08000">150</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#0057ae">TimeoutStartSec</span> = <span style="color:#b08000">5</span><span style="font-style:italic">s</span> <span style="color:#b08000">100</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#0057ae">TimeoutStopSec</span> = <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#0057ae">TimeoutAbortSec</span> = <span style="color:#b08000">15</span>
|
|
<span style="color:#0057ae">TimeoutSec</span> = <span style="color:#b08000">10</span>
|
|
<span style="color:#0057ae">TimeoutStartFailureMode</span> = <span style="color:#aa5500">abort</span>
|
|
<span style="color:#0057ae">TimeoutStopFailureMode</span> = <span style="color:#aa5500">kill</span>
|
|
<span style="color:#0057ae">RuntimeMaxSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">min</span> <span style="color:#b08000">20 </span><span style="font-style:italic">seconds</span>
|
|
<span style="color:#0057ae">RuntimeRandomizedExtraSec</span> = <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">WatchdogSec</span> = <span style="color:#b08000">90</span>
|
|
<span style="color:#0057ae">Restart</span> = <span style="color:#aa5500">on-watchdog</span>
|
|
<span style="color:#0057ae">RestartMode</span> = <span style="color:#aa5500">direct</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">PROTOCOL</span> <span style="color:#aa5500">RUNTIME_DIRECTORY</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">SECCOMP</span> <span style="color:#b08000">15</span> <span style="color:#b08000">23</span> <span style="color:#aa5500">SIGUSR1</span> <span style="color:#aa5500">SIGXCPU</span>
|
|
<span style="color:#0057ae">RestartPreventExitStatus</span> = <span style="color:#b08000">15</span> <span style="color:#b08000">23</span> <span style="color:#aa5500">SIGUSR1</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">SIGXCPU</span>
|
|
<span style="color:#0057ae">RestartForceExitStatus</span> = <span style="color:#aa5500">SIGQUIT</span> <span style="color:#aa5500">SIGSTOP</span> <span style="color:#b08000">99</span>
|
|
<span style="color:#0057ae">RootDirectoryStartOnly</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">NonBlocking</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">NotifyAccess</span> = <span style="color:#aa5500">exec</span>
|
|
<span style="color:#0057ae">Sockets</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.socket </span><span style="font-weight:bold">\</span>
|
|
<span style="color:#006e28">some-other</span><span style="color:#006e28;font-style:italic">.socket</span>
|
|
<span style="color:#0057ae">FileDescriptorStoreMax</span> = <span style="color:#b08000">5</span>
|
|
<span style="color:#0057ae">FileDescriptorStorePreserve</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">USBFunctionDescriptors</span> = /some/absolute/path
|
|
<span style="color:#0057ae">USBFunctionStrings</span> = /some/absolute/path
|
|
<span style="color:#0057ae">OOMPolicy</span> = <span style="color:#aa5500">stop</span>
|
|
<span style="color:#0057ae">OpenFile</span> = /some/path<span style="color:#ff5500">:</span><span style="font-style:italic">fd-name</span><span style="color:#ff5500">:</span><span style="color:#aa5500">graceful</span>,<span style="color:#aa5500">read-only</span>
|
|
<span style="color:#0057ae">ReloadSignal</span> = <span style="color:#aa5500">SIGUSR1</span>
|
|
|
|
<span style="color:#898887">## from systemd.exec</span>
|
|
<span style="color:#0057ae">ExecPaths</span> = some/path some/other/path
|
|
<span style="color:#0057ae">ExtensionImages</span> = /source/path
|
|
<span style="color:#0057ae">ExtensionDirectories</span> = /source/path
|
|
<span style="color:#0057ae">IPCNamespacePath</span> = /some/absolute/path
|
|
<span style="color:#0057ae">MemoryKSM</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">NoExecPaths</span> = some/path some/other/path
|
|
<span style="color:#0057ae">PrivateIPC</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#898887">## from systemd.exec Paths</span>
|
|
<span style="color:#0057ae">ExecSearchPath</span> = /some/path:/some/other/path
|
|
<span style="color:#0057ae">WorkingDirectory</span> = <span style="color:#3daee9">~</span>
|
|
<span style="color:#0057ae">RootDirectory</span> = /some/path
|
|
<span style="color:#0057ae">RootImage</span> = /some/path
|
|
<span style="color:#0057ae">RootImageOptions</span> = partition_name,noauto
|
|
<span style="color:#0057ae">RootEphemeral</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">RootHash</span> = /some/path
|
|
<span style="color:#0057ae">RootHash</span> = <span style="color:#b08000">0xABCDEF</span>
|
|
<span style="color:#0057ae">RootHashSignature</span> =
|
|
<span style="color:#0057ae">RootVerity</span> = /some/path
|
|
<span style="color:#0057ae">MountAPIVFS</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">BindLogSockets</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">ProcSubset</span> = <span style="color:#aa5500">pid</span>
|
|
<span style="color:#0057ae">BindPaths</span> = /source/path,/destination/path,<span style="color:#aa5500">rbind</span> <span style="font-weight:bold">\</span>
|
|
/source/path2,/destination/path2,<span style="color:#aa5500">norbind</span> <span style="font-weight:bold">\</span>
|
|
/source/path3
|
|
<span style="color:#0057ae">BindReadOnlyPaths</span> = /source/path,/destination/path,<span style="color:#aa5500">rbind</span> <span style="font-weight:bold">\</span>
|
|
/source/path2,/destination/path2,<span style="color:#aa5500">norbind</span> <span style="font-weight:bold">\</span>
|
|
/source/path3
|
|
<span style="color:#0057ae">MountImages</span> = /source/path,dest
|
|
<span style="color:#898887">## from systemd.exec Credentials</span>
|
|
<span style="color:#0057ae">User</span> = <span style="color:#b08000">1000</span>
|
|
<span style="color:#0057ae">Group</span> = group-name
|
|
<span style="color:#0057ae">DynamicUser</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">SupplementaryGroups</span> = group1 group-two <span style="color:#b08000">100</span> <span style="font-weight:bold">\</span>
|
|
one-more-group
|
|
<span style="color:#0057ae">SetLoginEnvironment</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">PAMName</span> =
|
|
<span style="color:#0057ae">LoadCredential</span> = some_id:/path/to/credential/data
|
|
<span style="color:#0057ae">LoadCredentialEncrypted</span> = some_id:/path/to/credential/data
|
|
<span style="color:#898887"># accepts an optional single trailing asterisk</span>
|
|
<span style="color:#0057ae">ImportCredential</span> = some*
|
|
<span style="color:#0057ae">SetCredential</span> = some_id:some_credential
|
|
<span style="color:#0057ae">SetCredentialEncrypted</span> = some_id:some_encrypted_credential
|
|
<span style="color:#898887">## from systemd.exec Capabilities</span>
|
|
<span style="color:#0057ae">CapabilityBoundingSet</span> = <span style="color:#ff5500">~</span> <span style="color:#aa5500">CAP_SYS_ADMIN</span> <span style="color:#aa5500">CAP_DAC_OVERRIDE</span> <span style="color:#aa5500">CAP_SYS_PTRACE</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">CAP_NET_ADMIN</span> <span style="color:#aa5500">CAP_SYS_BOOT</span>
|
|
<span style="color:#0057ae">AmbientCapabilities</span> = <span style="color:#aa5500">CAP_SYS_ADMIN</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">CAP_DAC_OVERRIDE</span>
|
|
<span style="color:#898887">## from systemd.exec Security</span>
|
|
<span style="color:#0057ae">NoNewPrivileges</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">SecureBits</span> = <span style="color:#aa5500">keep-caps</span> <span style="color:#aa5500">keep-caps-locked</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">no-setuid-fixup</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">no-setuid-fixup-locked</span>
|
|
<span style="color:#898887">## from systemd.exec Mandatory Access Control</span>
|
|
<span style="color:#0057ae">SELinuxContext</span> =
|
|
<span style="color:#0057ae">AppArmorProfile</span> = <span style="color:#ff5500">-</span> someprofile
|
|
<span style="color:#0057ae">SmackProcessLabel</span> = <span style="color:#ff5500">-</span>label
|
|
<span style="color:#898887">## from systemd.exec Process Properties</span>
|
|
<span style="color:#0057ae">LimitCPU</span> = <span style="color:#b08000">15</span><span style="font-style:italic">s</span>:<span style="color:#b08000">20</span><span style="font-style:italic">s</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span><span style="font-style:italic">G</span>:<span style="color:#b08000">24</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">LimitDATA</span> = <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#0057ae">LimitSTACK</span> = <span style="color:#b08000">512</span><span style="font-style:italic">K</span>
|
|
<span style="color:#0057ae">LimitCORE</span> = <span style="color:#b08000">128</span><span style="font-style:italic">K</span>
|
|
<span style="color:#0057ae">LimitRSS</span> = <span style="color:#b08000">2</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">LimitNOFILE</span> = <span style="color:#b08000">123</span>:<span style="color:#b08000">234</span>
|
|
<span style="color:#0057ae">LimitAS</span> = <span style="color:#b08000">3</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">LimitNPROC</span> = <span style="color:#b08000">4711</span>
|
|
<span style="color:#0057ae">LimitMEMLOCK</span> = <span style="color:#b08000">12</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">LimitLOCKS</span> = <span style="color:#b08000">321</span>
|
|
<span style="color:#0057ae">LimitSIGPENDING</span> = <span style="color:#b08000">46</span>
|
|
<span style="color:#0057ae">LimitMSGQUEUE</span> = <span style="color:#b08000">512</span><span style="font-style:italic">K</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">+12</span> : <span style="color:#b08000">+15</span>
|
|
<span style="color:#0057ae">LimitRTPRIO</span> = <span style="color:#b08000">20</span> : <span style="color:#b08000">40</span>
|
|
<span style="color:#0057ae">LimitRTTIME</span> = <span style="color:#b08000">12</span><span style="font-style:italic">us</span> : <span style="color:#b08000">15</span>
|
|
<span style="color:#0057ae">UMask</span> = <span style="color:#b08000">0022</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">default</span> <span style="color:#aa5500">private-dax</span> <span style="color:#aa5500">shared-dax</span>
|
|
<span style="color:#0057ae">KeyringMode</span> = <span style="color:#aa5500">private</span>
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">TimerSlackNSec</span> = <span style="color:#b08000">321</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">x86-64</span>
|
|
<span style="color:#0057ae">IgnoreSIGPIPE</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#898887">## from systemd.exec Scheduling</span>
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">+12</span>
|
|
<span style="color:#0057ae">CPUSchedulingPolicy</span> = <span style="color:#aa5500">fifo</span>
|
|
<span style="color:#0057ae">CPUSchedulingPriority</span> = <span style="color:#b08000">34</span>
|
|
<span style="color:#0057ae">CPUSchedulingResetOnFork</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">CPUAffinity</span> = <span style="color:#b08000">0</span> <span style="color:#b08000">1</span>, <span style="color:#b08000">2</span> , <span style="font-weight:bold">\</span>
|
|
<span style="color:#b08000">3</span>, <span style="color:#b08000">4-8</span>
|
|
<span style="color:#0057ae">NUMAPolicy</span> = <span style="color:#aa5500">interleave</span>
|
|
<span style="color:#0057ae">NUMAMask</span> = <span style="color:#b08000">1</span>,<span style="color:#b08000">2</span>,<span style="color:#b08000">3-8</span>
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = <span style="color:#aa5500">idle</span>
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = <span style="color:#b08000">5</span>
|
|
<span style="color:#898887">## from systemd.exec Sandboxing</span>
|
|
<span style="color:#0057ae">ProtectSystem</span> = <span style="color:#aa5500">strict</span>
|
|
<span style="color:#0057ae">ProtectHome</span> = <span style="color:#aa5500">read-only</span>
|
|
<span style="color:#0057ae">RuntimeDirectory</span> = some/dir:some_symlink
|
|
<span style="color:#0057ae">StateDirectory</span> = some/dir
|
|
<span style="color:#0057ae">CacheDirectory</span> = some/dir
|
|
<span style="color:#0057ae">LogsDirectory</span> = some/dir
|
|
<span style="color:#0057ae">ConfigurationDirectory</span> = some/dir
|
|
<span style="color:#0057ae">RuntimeDirectoryMode</span> = <span style="color:#b08000">0755</span>
|
|
<span style="color:#0057ae">StateDirectoryMode</span> = <span style="color:#b08000">0755</span>
|
|
<span style="color:#0057ae">CacheDirectoryMode</span> = <span style="color:#b08000">0755</span>
|
|
<span style="color:#0057ae">LogsDirectoryMode</span> = <span style="color:#b08000">0755</span>
|
|
<span style="color:#0057ae">ConfigurationDirectoryMode</span> = <span style="color:#b08000">0755</span>
|
|
<span style="color:#0057ae">RuntimeDirectoryPreserve</span> = <span style="color:#aa5500">restart</span>
|
|
<span style="color:#0057ae">TimeoutCleanSec</span> = <span style="color:#b08000">20</span>
|
|
<span style="color:#0057ae">ReadWritePaths</span> = some/dir
|
|
<span style="color:#0057ae">ReadOnlyPaths</span> = some/dir
|
|
<span style="color:#0057ae">InaccessiblePaths</span> = some/dir
|
|
<span style="color:#0057ae">TemporaryFileSystem</span> = /var:ro
|
|
<span style="color:#0057ae">PrivateTmp</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">PrivateDevices</span> = <span style="color:#aa5500">on</span>
|
|
<span style="color:#0057ae">PrivateNetwork</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">NetworkNamespacePath</span> = /some/path
|
|
<span style="color:#0057ae">PrivatePIDs</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = <span style="color:#aa5500">off</span>
|
|
<span style="color:#0057ae">ProtectHostname</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">ProtectClock</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">ProtectKernelTunables</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">ProtectKernelModules</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">ProtectKernelLogs</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">y</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#ff5500">~</span> <span style="color:#aa5500">AF_INET</span> <span style="color:#aa5500">AF_VSOCK</span>
|
|
<span style="color:#0057ae">RestrictFileSystems</span> = <span style="color:#ff5500">~</span><span style="color:#aa5500">btrfs</span> <span style="color:#aa5500">ntfs3</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">@temporary</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#aa5500">cgroup</span> <span style="color:#aa5500">net</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">ipc</span>
|
|
<span style="color:#0057ae">LockPersonality</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">MemoryDenyWriteExecute</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">RestrictRealtime</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">RestrictSUIDSGID</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">RemoveIPC</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">PrivateMounts</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">MountFlags</span> = <span style="color:#aa5500">shared</span>
|
|
<span style="color:#898887">## from systemd.exec System Call Filtering</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@debug</span> <span style="color:#aa5500">@aio</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ETIMEDOUT</span>
|
|
<span style="color:#0057ae">SystemCallArchitectures</span> = <span style="color:#aa5500">mips64-n32</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">native</span> <span style="color:#aa5500">sparc</span>
|
|
<span style="color:#0057ae">SystemCallLog</span> = <span style="color:#ff5500">~</span> some_name <span style="font-weight:bold">\</span>
|
|
another_name
|
|
<span style="color:#898887">## from systemd.exec System Call Environment</span>
|
|
<span style="color:#0057ae">Environment</span> = <span style="color:#0057ae">DISPLAY</span>=:<span style="color:#3daee9">%i</span>
|
|
<span style="color:#0057ae">Environment</span> = <span style="color:#0057ae">XAUTHORITY</span>=<span style="color:#3daee9">%t</span>/Xauthority.<span style="color:#3daee9">%i</span> <span style="font-weight:bold">\</span>
|
|
"<span style="color:#0057ae">var</span>=value with spaces"
|
|
<span style="color:#0057ae">Environment</span> = <span style="color:#0057ae">XDG_VTNR</span>=vt<span style="color:#3daee9">%i</span>
|
|
<span style="color:#0057ae">EnvironmentFile</span> = <span style="color:#ff5500">-</span> /some/path
|
|
<span style="color:#0057ae">PassEnvironment</span> = SOME VARIABLES TO PASS
|
|
<span style="color:#0057ae">UnsetEnvironment</span> = SOME VARIABLES TO BE UNSET
|
|
<span style="color:#898887">## from systemd.exec Logging and Standard Input/Output</span>
|
|
<span style="color:#0057ae">StandardInput</span> = <span style="color:#aa5500">file:</span>/some/absolute/path
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">journal+console</span>
|
|
<span style="color:#0057ae">StandardError</span> = <span style="color:#aa5500">inherit</span>
|
|
<span style="color:#0057ae">StandardInputText</span> = SWNrIHNpdHplIGRhIHVuJyBlc3NlIEtsb3B
|
|
<span style="color:#0057ae">StandardInputData</span> = yBkZW5rIG5hbnUhCkpldHogaXNzZSB1ZmYsIGVy
|
|
<span style="color:#0057ae">LogLevelMax</span> = <span style="color:#aa5500">info</span>
|
|
<span style="color:#0057ae">LogExtraFields</span> = <span style="color:#0057ae">FIELD</span>=VALUE <span style="color:#0057ae">OTHER_FIELD</span>=VALUE2
|
|
<span style="color:#0057ae">LogRateLimitIntervalSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">s</span> <span style="color:#b08000">500</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#0057ae">LogRateLimitBurst</span> = <span style="color:#b08000">50</span>
|
|
<span style="color:#0057ae">LogFilterPatterns</span> = <span style="color:#ff5500">~</span>some_rx
|
|
<span style="color:#0057ae">LogFilterPatterns</span> = \x7esome_rx
|
|
<span style="color:#0057ae">LogNamespace</span> = some_name
|
|
<span style="color:#0057ae">SyslogIdentifier</span> = some_identifier
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">daemon</span>
|
|
<span style="color:#0057ae">SyslogLevel</span> = <span style="color:#aa5500">debug</span>
|
|
<span style="color:#0057ae">SyslogLevelPrefix</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">TTYPath</span> = /dev/console
|
|
<span style="color:#0057ae">TTYReset</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">TTYVHangup</span> = <span style="color:#aa5500">on</span>
|
|
<span style="color:#0057ae">TTYRows</span> = <span style="color:#b08000">24</span>
|
|
<span style="color:#0057ae">TTYColumns</span> = <span style="color:#b08000">80</span>
|
|
<span style="color:#0057ae">TTYVTDisallocate</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#898887">## from systemd.exec System V Compatibility</span>
|
|
<span style="color:#0057ae">UtmpIdentifier</span> = utid
|
|
<span style="color:#0057ae">UtmpMode</span> = <span style="color:#aa5500">init</span>
|
|
|
|
<span style="color:#898887">## from systemd.kill</span>
|
|
<span style="color:#0057ae">KillMode</span> = <span style="color:#aa5500">process</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGABRT</span>
|
|
<span style="color:#0057ae">RestartKillSignal</span> = <span style="color:#aa5500">SIGHUP</span>
|
|
<span style="color:#0057ae">SendSIGHUP</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">SendSIGKILL</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">FinalKillSignal</span> = <span style="color:#aa5500">SIGABRT</span>
|
|
<span style="color:#0057ae">WatchdogSignal</span> = <span style="color:#aa5500">SIGQUIT</span>
|
|
|
|
<span style="color:#898887">## from systemd.resource-control</span>
|
|
<span style="color:#0057ae">CPUAccounting</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = <span style="color:#b08000">1234</span>
|
|
<span style="color:#0057ae">StartupCPUWeight</span> = <span style="color:#b08000">321</span>
|
|
<span style="color:#0057ae">CPUQuota</span> = <span style="color:#b08000">123.4</span><span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">CPUQuotaPeriodSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">s</span> <span style="color:#b08000">23</span><span style="font-style:italic">ms</span> <span style="color:#b08000">45</span><span style="font-style:italic">us</span>
|
|
<span style="color:#0057ae">AllowedCPUs</span> = <span style="color:#b08000">0-8</span>, <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">StartupAllowedCPUs</span> = <span style="color:#b08000">0-24</span>
|
|
<span style="color:#0057ae">AllowedMemoryNodes</span> = <span style="color:#b08000">5-8</span>, <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">StartupAllowedMemoryNodes</span> = <span style="color:#b08000">5-10</span>, <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">MemoryAccounting</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#b08000">10</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">MemoryLow</span> = <span style="color:#b08000">20</span><span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">StartupMemoryLow</span> = <span style="color:#b08000">22</span><span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">DefaultStartupMemoryLow</span> = <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#0057ae">MemoryHigh</span> = <span style="color:#b08000">40 </span><span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">StartupMemoryHigh</span> = <span style="color:#b08000">12</span><span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">MemoryMax</span> = <span style="color:#b08000">60</span><span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">StartupMemoryMax</span> = <span style="color:#b08000">55</span><span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#b08000">10</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">StartupMemorySwapMax</span> = <span style="color:#b08000">5</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">MemoryZSwapMax</span> = <span style="color:#b08000">2</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">MemoryZSwapWriteback</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">StartupMemoryZSwapMax</span> = <span style="color:#b08000">1500</span>k
|
|
<span style="color:#0057ae">TasksAccounting</span> = <span style="color:#aa5500">on</span>
|
|
<span style="color:#0057ae">TasksMax</span> = <span style="color:#b08000">50</span><span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">IOAccounting</span> = <span style="color:#aa5500">on</span>
|
|
<span style="color:#0057ae">IOWeight</span> = <span style="color:#b08000">1000</span>
|
|
<span style="color:#0057ae">StartupIOWeight</span> = <span style="color:#b08000">500</span>
|
|
<span style="color:#0057ae">IODeviceWeight</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">1000</span>
|
|
<span style="color:#0057ae">IOReadBandwidthMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">10</span><span style="font-style:italic">M</span>
|
|
<span style="color:#0057ae">IOWriteBandwidthMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">5</span><span style="font-style:italic">M</span>
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">1</span><span style="font-style:italic">K</span>
|
|
<span style="color:#0057ae">IOWriteIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">2</span><span style="font-style:italic">K</span>
|
|
<span style="color:#0057ae">IODeviceLatencyTargetSec</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">5</span><span style="font-style:italic">s</span> <span style="color:#b08000">20</span><span style="font-style:italic">ms</span> <span style="color:#b08000">100</span><span style="font-style:italic">us</span>
|
|
<span style="color:#0057ae">IPAccounting</span> = <span style="color:#aa5500">on</span>
|
|
<span style="color:#0057ae">IPAddressAllow</span> = <span style="color:#b08000">127</span>.<span style="color:#b08000">0</span>.<span style="color:#b08000">0</span>.<span style="color:#b08000">0</span>/<span style="color:#b08000">8</span> ::<span style="color:#b08000">1</span>/<span style="color:#b08000">128</span>
|
|
<span style="color:#0057ae">IPAddressDeny</span> = <span style="color:#b08000">127</span>.<span style="color:#b08000">0</span>.<span style="color:#b08000">0</span>.<span style="color:#b08000">0</span>/<span style="color:#b08000">8</span> ::<span style="color:#b08000">1</span>/<span style="color:#b08000">128</span>
|
|
<span style="color:#0057ae">DevicePolicy</span> = <span style="color:#aa5500">strict</span>
|
|
<span style="color:#0057ae">Slice</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.slice</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">bpf-firewall</span>
|
|
<span style="color:#0057ae">DelegateSubgroup</span> = some-cgroup-name
|
|
<span style="color:#0057ae">DisableControllers</span> = <span style="color:#aa5500">cpu</span> <span style="color:#aa5500">io</span>
|
|
<span style="color:#0057ae">ManagedOOMSwap</span> = <span style="color:#aa5500">auto</span>
|
|
<span style="color:#0057ae">ManagedOOMMemoryPressure</span> = <span style="color:#aa5500">kill</span>
|
|
<span style="color:#0057ae">ManagedOOMMemoryPressureLimit</span> = <span style="color:#b08000">50</span><span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">ManagedOOMMemoryPressureDurationSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">s</span> <span style="color:#b08000">50</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#0057ae">ManagedOOMPreference</span> = <span style="color:#aa5500">omit</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = <span style="color:#aa5500">skip</span>
|
|
<span style="color:#0057ae">MemoryPressureThresholdSec</span> = <span style="color:#b08000">50</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#0057ae">CoredumpReceive</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">BPFProgram</span> = <span style="color:#aa5500">bind6</span>:/sys/fs/bpf/sock-addr-hook
|
|
<span style="color:#0057ae">RestrictNetworkInterfaces</span> = <span style="color:#ff5500">~</span>eth1 eth2
|
|
<span style="color:#0057ae">NFTSet</span> = <span style="color:#aa5500">cgroup</span>:<span style="color:#aa5500">inet</span>:filter:my_service <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">user</span>:<span style="color:#aa5500">inet</span>:filter:serviceuser
|
|
|
|
|
|
<span style="font-weight:bold">[Slice]</span>
|
|
<span style="color:#898887"># The Slice section may include options of the resource-control option group.</span>
|
|
<span style="color:#898887"># See [Service] for available options of systemd.resource-control.</span>
|
|
|
|
|
|
<span style="font-weight:bold">[Socket]</span>
|
|
<span style="color:#0057ae">ListenStream</span> = 0.0.0.0:4000
|
|
<span style="color:#0057ae">ListenDatagram</span> = /path/to/socket
|
|
<span style="color:#0057ae">ListenFIFO</span> = /some/path
|
|
<span style="color:#0057ae">ListenSequentialPacket</span> = @namespace
|
|
<span style="color:#0057ae">ListenSpecial</span> = /some/path
|
|
<span style="color:#0057ae">ListenNetlink</span> = kobject-uevent
|
|
<span style="color:#0057ae">ListenMessageQueue</span> = /queue
|
|
<span style="color:#0057ae">ListenUSBFunction</span> = /some/path
|
|
<span style="color:#0057ae">SocketProtocol</span> = <span style="color:#aa5500">sctp</span>
|
|
<span style="color:#0057ae">BindIPv6Only</span> = <span style="color:#aa5500">both</span>
|
|
<span style="color:#0057ae">Backlog</span> = <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">BindToDevice</span> = name
|
|
<span style="color:#0057ae">SocketGroup</span> = users
|
|
<span style="color:#0057ae">SocketUser</span> = someuser
|
|
<span style="color:#0057ae">SocketMode</span> = <span style="color:#b08000">0644</span>
|
|
<span style="color:#0057ae">DirectoryMode</span> = <span style="color:#b08000">0744</span>
|
|
<span style="color:#0057ae">Accept</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">Writable</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">FlushPending</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">MaxConnections</span> = <span style="color:#b08000">34</span>
|
|
<span style="color:#0057ae">MaxConnectionsPerSource</span> = <span style="color:#b08000">10</span>
|
|
<span style="color:#0057ae">KeepAlive</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">KeepAliveTimeSec</span> = <span style="color:#b08000">15</span><span style="font-style:italic">s</span> <span style="color:#b08000">30</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#0057ae">KeepAliveIntervalSec</span> = <span style="color:#b08000">10</span><span style="font-style:italic">s</span> <span style="color:#b08000">123</span><span style="font-style:italic">us</span>
|
|
<span style="color:#0057ae">KeepAliveProbes</span> = <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">NoDelay</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">Priority</span> = <span style="color:#b08000">5</span>
|
|
<span style="color:#0057ae">DeferAcceptSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">s</span> <span style="color:#b08000">100</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#0057ae">ReceiveBuffer</span> = <span style="color:#b08000">10</span><span style="font-style:italic">K</span>
|
|
<span style="color:#0057ae">SendBuffer</span> = <span style="color:#b08000">15</span><span style="font-style:italic">K</span>
|
|
<span style="color:#0057ae">IPTOS</span> = <span style="color:#aa5500">low-delay</span>
|
|
<span style="color:#0057ae">IPTTL</span> = <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">Mark</span> = <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">ReusePort</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">SmackLabel</span> = value
|
|
<span style="color:#0057ae">SmackLabelIPIn</span> = value
|
|
<span style="color:#0057ae">SmackLabelIPOut</span> = value
|
|
<span style="color:#0057ae">SELinuxContextFromNet</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">PipeSize</span> = <span style="color:#b08000">1</span><span style="font-style:italic">M</span>
|
|
<span style="color:#0057ae">MessageQueueMaxMessages</span> = <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">MessageQueueMessageSize</span> = <span style="color:#b08000">1234</span>
|
|
<span style="color:#0057ae">FreeBind</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">Transparent</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">Broadcast</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">PassCredentials</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">PassSecurity</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">PassPacketInfo</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">Timestamping</span> = <span style="color:#aa5500">nsec</span>
|
|
<span style="color:#0057ae">TCPCongestion</span> = westwood
|
|
<span style="color:#0057ae">ExecStartPre</span> = <span style="color:#ff5500">+</span>/usr/bin/start/pre
|
|
<span style="color:#0057ae">ExecStartPost</span> = <span style="color:#ff5500">@</span>/usr/bin/start/post arg
|
|
<span style="color:#0057ae">ExecStopPre</span> = /usr/bin/stop/pre
|
|
<span style="color:#0057ae">ExecStopPost</span> = /usr/bin/stop/post
|
|
<span style="color:#0057ae">TimeoutSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">m</span> <span style="color:#b08000">30</span><span style="font-style:italic">sec</span>
|
|
<span style="color:#0057ae">Service</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">RemoveOnStop</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">Symlinks</span> = /some/path /some/other/path
|
|
<span style="color:#0057ae">FileDescriptorName</span> = some_name
|
|
<span style="color:#0057ae">TriggerLimitIntervalSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">s</span> <span style="color:#b08000">500</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#0057ae">TriggerLimitBurst</span> = <span style="color:#b08000">50</span>
|
|
<span style="color:#0057ae">PollLimitIntervalSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">s</span> <span style="color:#b08000">300</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#0057ae">PollLimitBurst</span> = <span style="color:#b08000">120</span>
|
|
<span style="color:#0057ae">PassFileDescriptorsToExec</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#898887"># see [Service] for options from systemd.exec and systemd.kill</span>
|
|
|
|
|
|
<span style="font-weight:bold">[Swap]</span>
|
|
<span style="color:#0057ae">What</span> = /dev/disk/by-uuid/5db77-fde6-424e-a1bb-e88e8996c
|
|
<span style="color:#898887"># </span><span style="color:#81ca2d;background-color:#f7e6e6;font-weight:bold">NOTE</span><span style="color:#898887">: Since systemd version 256 fstab-style identifiers are supported too.</span>
|
|
<span style="color:#0057ae">What</span> = UUID=5db77-fde6-424e-a1bb-e88e8996c
|
|
<span style="color:#0057ae">Priority</span> = <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">Options</span> = some,device,options
|
|
<span style="color:#0057ae">TimeoutSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">m</span> <span style="color:#b08000">20</span><span style="font-style:italic">s</span>
|
|
<span style="color:#898887"># see [Service] for options from systemd.exec and systemd.kill</span>
|
|
|
|
|
|
<span style="font-weight:bold">[Timer]</span>
|
|
<span style="color:#0057ae">OnActiveSec</span> = <span style="color:#b08000">90</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">5</span><span style="font-style:italic">min</span> <span style="color:#b08000">15</span><span style="font-style:italic">s</span> <span style="color:#b08000">100</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#0057ae">OnStartupSec</span> = <span style="color:#b08000">2 </span><span style="font-style:italic">minutes</span>
|
|
<span style="color:#0057ae">OnUnitActiveSec</span> = <span style="color:#b08000">1 </span><span style="font-style:italic">min</span>
|
|
<span style="color:#0057ae">OnUnitInactiveSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">m</span> <span style="color:#b08000">30</span><span style="font-style:italic">s</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">daily</span>
|
|
<span style="color:#0057ae">AccuracySec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">min</span> <span style="color:#b08000">10</span><span style="font-style:italic">sec</span>
|
|
<span style="color:#0057ae">RandomizedDelaySec</span> = <span style="color:#b08000">30</span><span style="font-style:italic">s</span>
|
|
<span style="color:#0057ae">FixedRandomDelay</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">DeferReactivation</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">OnClockChange</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">OnTimezoneChange</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some_timed</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Persistent</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">WakeSystem</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">RemainAfterElapse</span> = <span style="color:#aa5500">true</span>
|
|
|
|
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">Description</span> = Testing systemd unit
|
|
<span style="color:#0057ae">Documentation</span> = https://docs.kde.org/stable5/en/applications/katepart/highlight.html <span style="font-weight:bold">\</span>
|
|
man:/systemd.unit
|
|
<span style="color:#0057ae">Requires</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Requisite</span> = <span style="color:#006e28">some-service-name</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Wants</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">BindsTo</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">BindsTo</span> = <span style="color:#3daee9">%i</span><span style="color:#006e28;font-style:italic">.mount</span>
|
|
<span style="color:#0057ae">PartOf</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Upholds</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span><span style="color:#006e28">some-other</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Conflicts</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Before</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">After</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span><span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@instance</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">OnFailure</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">OnSuccess</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span><span style="color:#006e28">some-other</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">PropagatesReloadTo</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">ReloadPropagatedFrom</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">JoinsNamespaceOf</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">PropagatesStopTo</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span><span style="color:#006e28">some-other</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">StopPropagatedFrom</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span><span style="color:#006e28">some-other</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">RequiresMountsFor</span> = /tmp /var/log <span style="color:#3daee9">%h</span>
|
|
<span style="color:#0057ae">WantsMountsFor</span> = /tmp /var/log <span style="color:#3daee9">%h</span>
|
|
<span style="color:#0057ae">OnFailureJobMode</span> = <span style="color:#aa5500">fail</span>
|
|
<span style="color:#0057ae">OnSuccessJobMode</span> = <span style="color:#aa5500">replace</span>
|
|
<span style="color:#0057ae">IgnoreOnIsolate</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">RefuseManualStart</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">RefuseManualStop</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">AllowIsolate</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">DefaultDependencies</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">SurviveFinalKillSignal</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">CollectMode</span> = <span style="color:#aa5500">inactive</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">reboot</span>
|
|
<span style="color:#0057ae">SuccessAction</span> = <span style="color:#aa5500">none</span>
|
|
<span style="color:#0057ae">FailureActionExitStatus</span> = <span style="color:#b08000">15</span>
|
|
<span style="color:#0057ae">SuccessActionExitStatus</span> = <span style="color:#b08000">255</span>
|
|
<span style="color:#0057ae">JobTimeoutSec</span> = <span style="color:#b08000">10</span>
|
|
<span style="color:#0057ae">JobRunningTimeoutSec</span> = <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#0057ae">JobTimeoutAction</span> = <span style="color:#aa5500">none</span>
|
|
<span style="color:#0057ae">JobTimeoutRebootArgument</span> = some argument
|
|
<span style="color:#0057ae">StartLimitIntervalSec</span> = <span style="color:#b08000">0</span>
|
|
<span style="color:#0057ae">StartLimitBurst</span> = <span style="color:#b08000">10</span>
|
|
<span style="color:#0057ae">StartLimitAction</span> = <span style="color:#aa5500">none</span>
|
|
<span style="color:#0057ae">RebootArgument</span> = some argument
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">x86</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#ff5500">|</span><span style="color:#aa5500">vmware</span>
|
|
<span style="color:#0057ae">ConditionHost</span> = <span style="color:#ff5500">!</span>shodan<span style="color:#3daee9">*</span>
|
|
<span style="color:#0057ae">ConditionKernelCommandLine</span> = <span style="color:#ff5500">!</span>kernel_option
|
|
<span style="color:#0057ae">ConditionKernelVersion</span> = <span style="color:#ff5500">| </span>>= 4.<span style="color:#3daee9">*</span>
|
|
<span style="color:#0057ae">ConditionCredential</span> = name
|
|
<span style="color:#0057ae">ConditionEnvironment</span> = SOME_ENVIRONMENT_VARIABLE=some_value
|
|
<span style="color:#0057ae">ConditionSecurity</span> = <span style="color:#ff5500">| !</span> <span style="color:#aa5500">selinux</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#ff5500">!</span><span style="color:#aa5500">CAP_NET_ADMIN</span>
|
|
<span style="color:#0057ae">ConditionACPower</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">ConditionNeedsUpdate</span> = <span style="color:#ff5500">!</span>/var
|
|
<span style="color:#0057ae">ConditionFirstBoot</span> = <span style="color:#ff5500">|</span><span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">ConditionPathExists</span> = <span style="color:#ff5500">!</span>/some/absolute/path
|
|
<span style="color:#0057ae">ConditionPathExistsGlob</span> = <span style="color:#ff5500">|!</span>/m<span style="color:#3daee9">?</span>t/s<span style="color:#3daee9">[ao]</span>me/path<span style="color:#3daee9">*</span>
|
|
<span style="color:#0057ae">ConditionPathIsDirectory</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">ConditionPathIsSymbolicLink</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">ConditionPathIsMountPoint</span> = /some/path
|
|
<span style="color:#0057ae">ConditionPathIsReadWrite</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">ConditionPathIsEncrypted</span> = <span style="color:#ff5500">!</span>/some/absolute/path
|
|
<span style="color:#0057ae">ConditionDirectoryNotEmpty</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">ConditionFileNotEmpty</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">ConditionFileIsExecutable</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">ConditionUser</span> = <span style="color:#ff5500">|</span><span style="color:#aa5500">@system</span>
|
|
<span style="color:#0057ae">ConditionGroup</span> = <span style="color:#ff5500">|</span>groupname
|
|
<span style="color:#0057ae">ConditionControlGroupController</span> = <span style="color:#aa5500">memory</span>
|
|
<span style="color:#0057ae">ConditionMemory</span> = <span style="color:#ff5500">| </span>>= <span style="color:#b08000">1</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = <span style="color:#ff5500">| </span>< <span style="color:#b08000">8</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#ff5500">| </span><span style="color:#aa5500">sse2</span>
|
|
<span style="color:#0057ae">ConditionOSRelease</span> = ID=some-id
|
|
<span style="color:#0057ae">ConditionMemoryPressure</span> = <span style="color:#b08000">20</span>%<span style="color:#ff5500">/</span><span style="color:#aa5500;font-style:italic">5min</span>
|
|
<span style="color:#0057ae">ConditionCPUPressure</span> = <span style="color:#b08000">12</span>%<span style="color:#ff5500">/</span><span style="color:#aa5500;font-style:italic">10sec</span>
|
|
<span style="color:#0057ae">ConditionIOPressure</span> = <span style="color:#b08000">30</span>% <span style="color:#ff5500">/</span> <span style="color:#aa5500;font-style:italic">1min</span>
|
|
<span style="color:#0057ae">AssertArchitecture</span> = <span style="color:#aa5500">x86</span>
|
|
<span style="color:#0057ae">AssertVirtualization</span> = <span style="color:#ff5500">|</span><span style="color:#aa5500">vmware</span>
|
|
<span style="color:#0057ae">AssertHost</span> = <span style="color:#ff5500">!</span>shodan<span style="color:#3daee9">*</span>
|
|
<span style="color:#0057ae">AssertKernelCommandLine</span> = <span style="color:#ff5500">!</span>kernel_option
|
|
<span style="color:#0057ae">AssertKernelVersion</span> = <span style="color:#ff5500">!</span>>=5.3
|
|
<span style="color:#0057ae">AssertCredential</span> = name
|
|
<span style="color:#0057ae">AssertEnvironment</span> = SOME_ENVIRONMENT_VARIABLE=some_value
|
|
<span style="color:#0057ae">AssertSecurity</span> = <span style="color:#ff5500">| !</span> <span style="color:#aa5500">selinux</span>
|
|
<span style="color:#0057ae">AssertCapability</span> = <span style="color:#ff5500">!</span><span style="color:#aa5500">CAP_NET_ADMIN</span>
|
|
<span style="color:#0057ae">AssertACPower</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">AssertNeedsUpdate</span> = <span style="color:#ff5500">!</span>/var
|
|
<span style="color:#0057ae">AssertFirstBoot</span> = <span style="color:#ff5500">|</span><span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">AssertPathExists</span> = <span style="color:#ff5500">!</span>/some/absolute/path
|
|
<span style="color:#0057ae">AssertPathExistsGlob</span> = <span style="color:#ff5500">|!</span>/mnt/<span style="color:#3daee9">*</span>
|
|
<span style="color:#0057ae">AssertPathIsDirectory</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">AssertPathIsSymbolicLink</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">AssertPathIsMountPoint</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">AssertPathIsReadWrite</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">AssertPathIsEncrypted</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">AssertDirectoryNotEmpty</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">AssertFileNotEmpty</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">AssertFileIsExecutable</span> = <span style="color:#ff5500">!</span>/some/path
|
|
<span style="color:#0057ae">AssertUser</span> = <span style="color:#ff5500">|</span><span style="color:#aa5500">@system</span>
|
|
<span style="color:#0057ae">AssertGroup</span> = <span style="color:#ff5500">|</span>groupname
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#aa5500">memory</span>
|
|
<span style="color:#0057ae">AssertCPUFeature</span> = <span style="color:#ff5500">| </span><span style="color:#aa5500">sse4_2</span>
|
|
<span style="color:#0057ae">AssertOSRelease</span> = ID=some-id
|
|
<span style="color:#0057ae">AssertMemoryPressure</span> = <span style="color:#b08000">20</span>%<span style="color:#ff5500">/</span><span style="color:#aa5500;font-style:italic">5min</span>
|
|
<span style="color:#0057ae">AssertCPUPressure</span> = <span style="color:#b08000">12</span>%<span style="color:#ff5500">/</span><span style="color:#aa5500;font-style:italic">10sec</span>
|
|
<span style="color:#0057ae">AssertIOPressure</span> = <span style="color:#b08000">30</span>% <span style="color:#ff5500">/</span> <span style="color:#aa5500;font-style:italic">1min</span>
|
|
|
|
|
|
<span style="color:#898887">###### invalid sections</span>
|
|
[Device]
|
|
[Invalid]
|
|
<span style="font-weight:bold">[Slice]</span>
|
|
[Target]
|
|
|
|
|
|
|
|
<span style="color:#898887">############</span>
|
|
<span style="color:#898887"># Extensions</span>
|
|
<span style="color:#898887">############</span>
|
|
|
|
|
|
<span style="color:#898887">###### option</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">Description</span> = testing extensions
|
|
<span style="font-style:italic">X-this = some value</span>
|
|
<span style="font-style:italic">X-multiple-lines = some.service </span><span style="font-weight:bold">\</span>
|
|
<span style="font-style:italic"> other service</span>
|
|
|
|
|
|
<span style="color:#898887">###### section</span>
|
|
<span style="font-weight:bold;font-style:italic">[X-Unit]</span>
|
|
<span style="font-style:italic">name = value</span>
|
|
|
|
<span style="color:#898887">## Comments in an extension section are just the same as elsewhere.</span>
|
|
|
|
<span style="font-style:italic">Some text in an extension section.</span>
|
|
<span style="font-style:italic">The extension section ends with the next section header.</span>
|
|
|
|
|
|
|
|
<span style="color:#898887">########</span>
|
|
<span style="color:#898887"># Format</span>
|
|
<span style="color:#898887">########</span>
|
|
|
|
<span style="color:#898887">###### for options accepting multiple values, lines may be continued</span>
|
|
<span style="color:#898887"># using a trailing backlash</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">Before</span> = <span style="color:#006e28">before-me</span><span style="color:#006e28;font-style:italic">.socket </span><span style="font-weight:bold">\</span>
|
|
<span style="color:#006e28">before-me</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
|
|
<span style="color:#898887">###### additional spaces are OK</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">RequiresMountsFor</span> = /tmp /var/log
|
|
|
|
|
|
|
|
<span style="color:#898887">########################################################</span>
|
|
<span style="color:#898887"># Testing valid and invalid values for defined contexts.</span>
|
|
<span style="color:#898887">########################################################</span>
|
|
|
|
|
|
<span style="color:#898887">###### invalid options</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#898887"># missing assignment operator</span>
|
|
<span style="color:#0057ae">Description</span> is invalid as it lacks the assignment operator
|
|
<span style="color:#898887"># invalid option name</span>
|
|
InvalidOption = some text
|
|
<span style="color:#898887"># WantedBy belongs to the [Install] section</span>
|
|
WantedBy = some.service some.socket
|
|
|
|
|
|
<span style="color:#898887">###### AC architecture</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#898887"># see "architecture" for all possible values</span>
|
|
<span style="color:#0057ae">AssertArchitecture</span> = <span style="color:#aa5500">alpha</span>
|
|
<span style="color:#0057ae">AssertArchitecture</span> = <span style="color:#ff5500">| </span><span style="color:#aa5500">alpha</span>
|
|
<span style="color:#0057ae">AssertArchitecture</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">alpha</span>
|
|
<span style="color:#0057ae">AssertArchitecture</span> = <span style="color:#ff5500">!</span> <span style="color:#aa5500">alpha</span>
|
|
<span style="color:#898887"># other options</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">alpha</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">AssertArchitecture</span> = <span style="color:#ff5500">!</span>| <span style="color:#aa5500">alpha</span>
|
|
<span style="color:#0057ae">AssertArchitecture</span> = <span style="color:#ff5500">|</span>| <span style="color:#aa5500">alpha</span>
|
|
<span style="color:#0057ae">AssertArchitecture</span> = <span style="color:#ff5500">!</span>! <span style="color:#aa5500">alpha</span>
|
|
|
|
|
|
<span style="color:#898887">###### AC boolean</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#898887"># see "boolean" for all possible values</span>
|
|
<span style="color:#0057ae">AssertACPower</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">AssertACPower</span> = <span style="color:#ff5500">| </span><span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">AssertACPower</span> = <span style="color:#ff5500">| !</span> <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">AssertACPower</span> = <span style="color:#ff5500">!</span> <span style="color:#aa5500">true</span>
|
|
<span style="color:#898887"># other options</span>
|
|
<span style="color:#0057ae">AssertFirstBoot</span> = <span style="color:#ff5500">| !</span> <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">ConditionACPower</span> = <span style="color:#ff5500">| !</span> <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">ConditionFirstBoot</span> = <span style="color:#ff5500">| !</span> <span style="color:#aa5500">true</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">AssertACPower</span> = <span style="color:#ff5500">!</span> | <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">AssertACPower</span> = <span style="color:#ff5500">| </span>| <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">AssertACPower</span> = <span style="color:#ff5500">!</span>! <span style="color:#aa5500">true</span>
|
|
|
|
|
|
<span style="color:#898887">###### AC capability</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#898887"># see "capability" for all possible values</span>
|
|
<span style="color:#0057ae">AssertCapability</span> = <span style="color:#aa5500">CAP_CHOWN</span>
|
|
<span style="color:#0057ae">AssertCapability</span> = <span style="color:#ff5500">| </span><span style="color:#aa5500">CAP_CHOWN</span>
|
|
<span style="color:#0057ae">AssertCapability</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">CAP_CHOWN</span>
|
|
<span style="color:#0057ae">AssertCapability</span> = <span style="color:#ff5500">!</span> <span style="color:#aa5500">CAP_CHOWN</span>
|
|
<span style="color:#898887"># other options</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">CAP_CHOWN</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">AssertCapability</span> = <span style="color:#ff5500">!</span>| <span style="color:#aa5500">CAP_CHOWN</span>
|
|
<span style="color:#0057ae">AssertCapability</span> = <span style="color:#ff5500">|</span>| <span style="color:#aa5500">CAP_CHOWN</span>
|
|
<span style="color:#0057ae">AssertCapability</span> = <span style="color:#ff5500">!</span>! <span style="color:#aa5500">CAP_CHOWN</span>
|
|
|
|
|
|
<span style="color:#898887">###### AC cardinal</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = < <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = <= <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = = <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = != <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = >=<span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = > <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = <span style="color:#ff5500">|</span>< <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = <span style="color:#ff5500">|</span><= <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = <span style="color:#ff5500">|</span>= <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = <span style="color:#ff5500">| </span>!= <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = <span style="color:#ff5500">| </span>>=<span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = <span style="color:#ff5500">| </span>> <span style="color:#b08000">123456789</span>
|
|
<span style="color:#898887">## other options</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = > <span style="color:#b08000">4</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = == <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = >> <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionCPUs</span> = = <span style="color:#b08000">123456789</span>.987
|
|
<span style="color:#0057ae">ConditionCPUs</span> = <span style="color:#ff5500">|</span>| = <span style="color:#b08000">123456789</span>.987
|
|
|
|
|
|
<span style="color:#898887">###### AC cardinal KMGT</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">ConditionMemory</span> = > <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionMemory</span> = <span style="color:#ff5500">|</span>< <span style="color:#b08000">123456789</span>
|
|
<span style="color:#0057ae">ConditionMemory</span> = <span style="color:#ff5500">|!</span> >= <span style="color:#b08000">1</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">ConditionMemory</span> = <span style="color:#ff5500">| </span>!= <span style="color:#b08000">512</span><span style="font-style:italic">K</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#898887"># no exabyte (yet)</span>
|
|
<span style="color:#0057ae">ConditionMemory</span> = = <span style="color:#b08000">1</span>E
|
|
|
|
|
|
<span style="color:#898887">###### AC cpu feature</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#898887"># see "cpu feature" for all possible values</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">sse2</span>
|
|
|
|
|
|
<span style="color:#898887">###### AC controller cg (assert/condition for control group controller)</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#aa5500">cpu</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#ff5500">| </span><span style="color:#aa5500">cpu</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">cpu</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#ff5500">!</span> <span style="color:#aa5500">cpu</span>
|
|
<span style="color:#898887"># other options</span>
|
|
<span style="color:#0057ae">ConditionControlGroupController</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">cpu</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#ff5500">!</span>| <span style="color:#aa5500">cpu</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#ff5500">|</span>| <span style="color:#aa5500">cpu</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#ff5500">!</span>! <span style="color:#aa5500">cpu</span>
|
|
|
|
|
|
<span style="color:#898887">###### AC firmware</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#898887"># see "firmware" for all possible values</span>
|
|
<span style="color:#0057ae">ConditionFirmware</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">uefi</span>
|
|
|
|
|
|
<span style="color:#898887">###### AC group</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">AssertGroup</span> = <span style="color:#ff5500">| </span>name
|
|
<span style="color:#0057ae">AssertGroup</span> = <span style="color:#ff5500">|!</span> name
|
|
<span style="color:#0057ae">AssertGroup</span> = <span style="color:#ff5500">!</span> name
|
|
<span style="color:#898887"># other options</span>
|
|
<span style="color:#0057ae">ConditionGroup</span> = <span style="color:#ff5500">|!</span> name
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">AssertGroup</span> = <span style="color:#ff5500">!</span>| name
|
|
<span style="color:#0057ae">AssertGroup</span> = <span style="color:#ff5500">|</span>| name
|
|
<span style="color:#0057ae">AssertGroup</span> = <span style="color:#ff5500">!</span>! name
|
|
|
|
|
|
<span style="color:#898887">###### AC security</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#898887"># see "security" for all possible values</span>
|
|
<span style="color:#0057ae">AssertSecurity</span> = <span style="color:#aa5500">audit</span>
|
|
<span style="color:#0057ae">AssertSecurity</span> = <span style="color:#ff5500">| </span><span style="color:#aa5500">audit</span>
|
|
<span style="color:#0057ae">AssertSecurity</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">audit</span>
|
|
<span style="color:#0057ae">AssertSecurity</span> = <span style="color:#ff5500">!</span> <span style="color:#aa5500">audit</span>
|
|
<span style="color:#898887"># other options</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">audit</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">AssertSecurity</span> = <span style="color:#ff5500">!</span>| <span style="color:#aa5500">audit</span>
|
|
<span style="color:#0057ae">AssertSecurity</span> = <span style="color:#ff5500">|</span>| <span style="color:#aa5500">audit</span>
|
|
<span style="color:#0057ae">AssertSecurity</span> = <span style="color:#ff5500">!</span>! <span style="color:#aa5500">audit</span>
|
|
|
|
|
|
<span style="color:#898887">###### AC text</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">AssertKernelCommandLine</span> = option=value
|
|
<span style="color:#0057ae">AssertKernelCommandLine</span> = <span style="color:#ff5500">| </span>arg
|
|
<span style="color:#0057ae">AssertKernelCommandLine</span> = <span style="color:#ff5500">|!</span> arg
|
|
<span style="color:#0057ae">AssertKernelCommandLine</span> = <span style="color:#ff5500">!</span> arg
|
|
<span style="color:#898887"># other options</span>
|
|
<span style="color:#0057ae">AssertDirectoryNotEmpty</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">AssertFileIsExecutable</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">AssertFileNotEmpty</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">AssertKernelVersion</span> = <span style="color:#ff5500">|!</span> arg
|
|
<span style="color:#0057ae">AssertNeedsUpdate</span> = <span style="color:#ff5500">|!</span> /etc
|
|
<span style="color:#0057ae">AssertPathExists</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">AssertPathIsDirectory</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">AssertPathIsEncrypted</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">AssertPathIsMountPoint</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">AssertPathIsReadWrite</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">AssertPathIsSymbolicLink</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">ConditionDirectoryNotEmpty</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">ConditionEnvironment</span> = <span style="color:#ff5500">|!</span> name=value
|
|
<span style="color:#0057ae">ConditionFileIsExecutable</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">ConditionFileNotEmpty</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">ConditionKernelCommandLine</span> = <span style="color:#ff5500">|!</span> arg
|
|
<span style="color:#0057ae">ConditionKernelVersion</span> = <span style="color:#ff5500">|!</span> arg
|
|
<span style="color:#0057ae">ConditionNeedsUpdate</span> = <span style="color:#ff5500">|!</span> /var
|
|
<span style="color:#0057ae">ConditionPathExists</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">ConditionPathIsDirectory</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">ConditionPathIsEncrypted</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">ConditionPathIsMountPoint</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">ConditionPathIsReadWrite</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#0057ae">ConditionPathIsSymbolicLink</span> = <span style="color:#ff5500">|!</span> /some/path
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">AssertKernelCommandLine</span> = <span style="color:#ff5500">!</span>| arg
|
|
<span style="color:#0057ae">AssertKernelCommandLine</span> = <span style="color:#ff5500">|</span>| arg
|
|
<span style="color:#0057ae">AssertKernelCommandLine</span> = <span style="color:#ff5500">!</span>! arg
|
|
|
|
|
|
<span style="color:#898887">###### AC text *</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">AssertHost</span> = hostname
|
|
<span style="color:#0057ae">AssertHost</span> = hostname<span style="color:#3daee9">*</span>
|
|
<span style="color:#0057ae">AssertHost</span> = <span style="color:#ff5500">| </span>hostname<span style="color:#3daee9">*</span>
|
|
<span style="color:#0057ae">AssertHost</span> = <span style="color:#ff5500">|!</span>hostname<span style="color:#3daee9">*</span>
|
|
<span style="color:#0057ae">AssertHost</span> = <span style="color:#ff5500">!</span>hostname<span style="color:#3daee9">*</span>
|
|
<span style="color:#898887"># other options</span>
|
|
<span style="color:#0057ae">ConditionHost</span> = <span style="color:#ff5500">|!</span>hostname<span style="color:#3daee9">*</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">AssertHost</span> = <span style="color:#ff5500">!</span>| hostname<span style="color:#3daee9">*</span>
|
|
<span style="color:#0057ae">AssertHost</span> = <span style="color:#ff5500">|</span>| hostname<span style="color:#3daee9">*</span>
|
|
<span style="color:#0057ae">AssertHost</span> = <span style="color:#ff5500">!</span>! hostname<span style="color:#3daee9">*</span>
|
|
|
|
|
|
<span style="color:#898887">###### AC text glob</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">AssertPathExistsGlob</span> = <span style="color:#ff5500">|!</span>/s<span style="color:#3daee9">[ao]</span>me/path<span style="color:#3daee9">*</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ConditionPathExistsGlob</span> = <span style="color:#ff5500">!</span>! /s<span style="color:#3daee9">?</span>me/path<span style="color:#3daee9">*</span>
|
|
|
|
|
|
<span style="color:#898887">###### AC threshold</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#898887"># there is only a fixed set of time spans to choose from</span>
|
|
<span style="color:#0057ae">ConditionMemoryPressure</span> = <span style="color:#b08000">10</span>%<span style="color:#ff5500">/</span><span style="color:#aa5500;font-style:italic">10sec</span>
|
|
<span style="color:#0057ae">ConditionMemoryPressure</span> = <span style="color:#b08000">20</span>%<span style="color:#ff5500">/</span><span style="color:#aa5500;font-style:italic">1min</span>
|
|
<span style="color:#0057ae">ConditionMemoryPressure</span> = <span style="color:#ff5500">| !</span> <span style="color:#b08000">30</span> % <span style="color:#ff5500">/</span> <span style="color:#aa5500;font-style:italic">5min</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#898887"># invalid time span</span>
|
|
<span style="color:#0057ae">ConditionMemoryPressure</span> = <span style="color:#b08000">30</span>%<span style="color:#ff5500">/</span>5sec
|
|
<span style="color:#898887"># no %</span>
|
|
<span style="color:#0057ae">ConditionMemoryPressure</span> = 30 / 10sec
|
|
<span style="color:#898887"># no separator before time span</span>
|
|
<span style="color:#0057ae">ConditionMemoryPressure</span> = <span style="color:#b08000">30</span>% 10sec
|
|
|
|
|
|
<span style="color:#898887">###### AC user</span>
|
|
<span style="color:#0057ae">AssertUser</span> = <span style="color:#ff5500">| </span><span style="color:#aa5500">@system</span>
|
|
<span style="color:#0057ae">AssertUser</span> = <span style="color:#ff5500">| </span>name
|
|
<span style="color:#0057ae">AssertUser</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">@system</span>
|
|
<span style="color:#0057ae">AssertUser</span> = <span style="color:#ff5500">!</span> name
|
|
<span style="color:#898887"># other options</span>
|
|
<span style="color:#0057ae">ConditionUser</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">@system</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">AssertUser</span> = <span style="color:#ff5500">!</span>| name
|
|
<span style="color:#0057ae">AssertUser</span> = <span style="color:#ff5500">|</span>| name
|
|
<span style="color:#0057ae">AssertUser</span> = <span style="color:#ff5500">!</span>! name
|
|
|
|
|
|
<span style="color:#898887">###### AC virtualization</span>
|
|
<span style="color:#898887"># accepts boolean too</span>
|
|
<span style="color:#0057ae">AssertVirtualization</span> = <span style="color:#ff5500">|</span><span style="color:#aa5500">true</span>
|
|
<span style="color:#898887"># see "virtualization" for all possible values</span>
|
|
<span style="color:#0057ae">AssertVirtualization</span> = <span style="color:#aa5500">container</span>
|
|
<span style="color:#0057ae">AssertVirtualization</span> = <span style="color:#ff5500">| </span><span style="color:#aa5500">container</span>
|
|
<span style="color:#0057ae">AssertVirtualization</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">container</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#ff5500">|!</span> <span style="color:#aa5500">container</span>
|
|
<span style="color:#0057ae">AssertVirtualization</span> = <span style="color:#ff5500">!</span> <span style="color:#aa5500">container</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">AssertVirtualization</span> = <span style="color:#ff5500">!</span> | <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">AssertVirtualization</span> = <span style="color:#ff5500">| </span>| <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">AssertVirtualization</span> = <span style="color:#ff5500">!</span>! <span style="color:#aa5500">true</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">AssertVirtualization</span> = <span style="color:#aa5500">true</span> false
|
|
|
|
|
|
<span style="color:#898887">###### - text</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">AppArmorProfile</span> = <span style="color:#ff5500">-</span> some-profile
|
|
<span style="color:#0057ae">AppArmorProfile</span> =<span style="color:#ff5500">-</span>profile
|
|
|
|
|
|
<span style="color:#898887">###### -+/path list</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">ReadWritePaths</span> = <span style="color:#ff5500">-</span>/some/path
|
|
<span style="color:#0057ae">ReadWritePaths</span> = <span style="color:#ff5500">-+</span>/some/path
|
|
<span style="color:#0057ae">ReadWritePaths</span> = <span style="color:#ff5500">+</span>/some/path
|
|
<span style="color:#0057ae">ReadWritePaths</span> =<span style="color:#ff5500">+</span>/some/path-+/ <span style="color:#ff5500">-</span>/some/other/path <span style="font-weight:bold">\</span>
|
|
<span style="color:#ff5500">-+</span>/one/more/path
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ReadWritePaths</span> = - /some/path
|
|
<span style="color:#0057ae">ReadWritePaths</span> = + /some/path
|
|
<span style="color:#0057ae">ReadWritePaths</span> = +-/some/path
|
|
|
|
|
|
<span style="color:#898887">###### ~ address family list</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_ALG</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_APPLETALK</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_ASH</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_ATMPVC</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_ATMSVC</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_AX25</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_BLUETOOTH</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_BRIDGE</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_CAIF</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_CAN</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_DECnet</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_ECONET</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_FILE</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_IB</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_IEEE802154</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_INET</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_INET6</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_IPX</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_IRDA</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_ISDN</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_IUCV</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_KCM</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_KEY</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_LLC</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_LOCAL</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_MAX</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_MPLS</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_NETBEUI</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_NETLINK</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_NETROM</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_NFC</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_PACKET</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_PHONET</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_PPPOX</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_QIPCRTR</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_RDS</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_ROSE</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_ROUTE</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_RXRPC</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_SECURITY</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_SMC</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_SNA</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_TIPC</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_UNIX</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_UNSPEC</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_VSOCK</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_WANPIPE</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_X25</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_XDP</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#ff5500">~</span> <span style="color:#aa5500">AF_XDP</span> <span style="color:#aa5500">AF_LOCAL</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">AF_SECURITY</span>
|
|
<span style="color:#898887"># since version 249 an additional 'none' is supported</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">none</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = AF_INVALID
|
|
<span style="color:#898887"># multiple values including `none`</span>
|
|
<span style="color:#0057ae">RestrictAddressFamilies</span> = <span style="color:#aa5500">AF_ROUTE</span> <span style="color:#aa5500">none</span> AF_ROSE
|
|
|
|
|
|
<span style="color:#898887">###### ~ capability list</span>
|
|
<span style="color:#898887"># all the values of capability, but multple values for a single option entry are valid</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">AmbientCapabilities</span> = <span style="color:#ff5500">~</span> <span style="color:#aa5500">CAP_NET_ADMIN</span> <span style="color:#aa5500">CAP_NET_RAW</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">CAP_WAKE_ALARM</span>
|
|
<span style="color:#0057ae">CapabilityBoundingSet</span>=<span style="color:#ff5500">~</span><span style="color:#aa5500">CAP_NET_ADMIN</span> <span style="color:#aa5500">CAP_NET_RAW</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">CAP_WAKE_ALARM</span>
|
|
|
|
|
|
<span style="color:#898887">###### ~ namespace list</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#aa5500">cgroup</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#aa5500">ipc</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#aa5500">mnt</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#aa5500">net</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#aa5500">pid</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#aa5500">user</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#aa5500">uts</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#aa5500">cgroup</span> <span style="color:#aa5500">uts</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#ff5500">~</span> <span style="color:#aa5500">cgroup</span> <span style="color:#aa5500">pid</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">uts</span>
|
|
<span style="color:#898887"># includes boolean</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = i<span style="color:#aa5500">n</span>valid
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#ff5500">~</span> <span style="color:#aa5500">true</span>
|
|
<span style="color:#898887"># if boolean, no multiple values</span>
|
|
<span style="color:#0057ae">RestrictNamespaces</span> = <span style="color:#aa5500">true</span> cgroup
|
|
|
|
|
|
<span style="color:#898887">###### ~ system call filter list</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@aio</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@basic-io</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@chown</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@clock</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@cpu-emulation</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@debug</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@default</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@file-system</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@io-event</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@ipc</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@keyring</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@memlock</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@module</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@mount</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@network-io</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@obsolete</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@privileged</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@process</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@raw-io</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@reboot</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@resources</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@setuid</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@signal</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@swap</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@sync</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@system-service</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@timer</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#aa5500">@obsolete</span> <span style="color:#aa5500">@timer</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">@swap</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = <span style="color:#ff5500">~</span> <span style="color:#aa5500">@reboot</span> <span style="color:#aa5500">@swap</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">SystemCallFilter</span> = invalid
|
|
<span style="color:#0057ae">SystemCallFilter</span> = @invalid @ sync
|
|
|
|
|
|
<span style="color:#898887">###### action</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">exit</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">exit-force</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">halt</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">halt-force</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">halt-immediate</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">kexec</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">kexec-force</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">none</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">poweroff</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">poweroff-force</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">poweroff-immediate</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">reboot</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">reboot-force</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">reboot-immediate</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">soft-reboot</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">soft-reboot-force</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">FailureAction</span> = invalid
|
|
<span style="color:#0057ae">FailureAction</span> = invalid <span style="color:#aa5500">exit</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">FailureAction</span> = <span style="color:#aa5500">none</span> exit
|
|
|
|
|
|
<span style="color:#898887">###### architecture</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">alpha</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">arc</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">arc-be</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">arm</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">arm-be</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">arm64</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">arm64-be</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">cris</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">ia64</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">m68k</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">mips</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">mips-le</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">mips64</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">mips64-le</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">parisc</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">parisc64</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">ppc</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">ppc-le</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">ppc64</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">ppc64-le</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">s390</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">s390x</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">sh</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">sh64</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">sparc</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">sparc64</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">tilegx</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">x86</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">x86-64</span>
|
|
<span style="color:#898887"># special value "native"</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">native</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = invalid
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = invalid <span style="color:#aa5500">x86</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ConditionArchitecture</span> = <span style="color:#aa5500">sparc</span> x86
|
|
|
|
|
|
<span style="color:#898887">###### boolean</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">1</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">0</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">t</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">f</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">y</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">n</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">on</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">off</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = i<span style="color:#aa5500">n</span>valid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">StopWhenUnneeded</span> = <span style="color:#aa5500">false</span> true
|
|
|
|
|
|
<span style="color:#898887">###### calendar</span>
|
|
<span style="font-weight:bold">[Timer]</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">daily</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">hourly</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">minutely</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">monthly</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">quarterly</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">semiannually</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">weekly</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">yearly</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">daily</span> <span style="color:#aa5500">UTC</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">daily</span> <span style="color:#aa5500">utc</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">monday</span> <span style="color:#3daee9">*</span>-12-<span style="color:#3daee9">*</span> 17:00
|
|
<span style="color:#0057ae">OnCalendar</span> = <span style="color:#aa5500">Mon</span> <span style="color:#3daee9">*</span>-12-<span style="color:#3daee9">*</span> 17:00
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">OnCalendar</span> = Mo <span style="color:#3daee9">*</span>-12-<span style="color:#3daee9">*</span> 17:00
|
|
|
|
|
|
<span style="color:#898887">###### capability</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_AUDIT_CONTROL</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_AUDIT_READ</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_AUDIT_WRITE</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_BLOCK_SUSPEND</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_CHECKPOINT_RESTORE</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_CHOWN</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_DAC_OVERRIDE</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_DAC_READ_SEARCH</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_FOWNER</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_FSETID</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_IPC_LOCK</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_IPC_OWNER</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_KILL</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_LEASE</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_LINUX_IMMUTABLE</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_MAC_ADMIN</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_MAC_OVERRIDE</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_MKNOD</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_NET_ADMIN</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_NET_BIND_SERVICE</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_NET_BROADCAST</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_NET_RAW</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SETGID</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SETFCAP</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SETPCAP</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SETUID</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SYS_ADMIN</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SYS_BOOT</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SYS_CHROOT</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SYS_MODULE</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SYS_NICE</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SYS_PACCT</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SYS_PTRACE</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SYS_RAWIO</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SYS_RESOURCE</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SYS_TIME</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SYS_TTY_CONFIG</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_SYSLOG</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_WAKE_ALARM</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ConditionCapability</span> = <span style="color:#aa5500">CAP_NET_ADMIN</span> CAP_NET_RAW
|
|
|
|
|
|
<span style="color:#898887">###### cardinal</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">StartLimitBurst</span> = <span style="color:#b08000">15</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">StartLimitBurst</span> = -10
|
|
<span style="color:#0057ae">StartLimitBurst</span> = <span style="color:#b08000">12</span>.34
|
|
<span style="color:#0057ae">StartLimitBurst</span> = <span style="color:#b08000">10</span>%
|
|
<span style="color:#0057ae">StartLimitBurst</span> = infinity
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">StartLimitBurst</span> = <span style="color:#b08000">10</span> 20
|
|
|
|
|
|
<span style="color:#898887">###### cardinal % infinity</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">TasksMax</span> = <span style="color:#b08000">15</span>
|
|
<span style="color:#0057ae">TasksMax</span> = <span style="color:#b08000">10</span><span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">TasksMax</span> = <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">TasksMax</span> = -10
|
|
<span style="color:#0057ae">TasksMax</span> = <span style="color:#b08000">12</span>.<span style="color:#b08000">34</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">TasksMax</span> = <span style="color:#b08000">10</span> <span style="color:#b08000">20</span>
|
|
<span style="color:#0057ae">TasksMax</span> = <span style="color:#aa5500">infinity</span> 20
|
|
|
|
|
|
<span style="color:#898887">###### cardinal %KGMT infinity</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#b08000">12</span><span style="font-style:italic">K</span>
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#b08000">12</span><span style="font-style:italic">M</span>
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#b08000">12</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#b08000">12</span><span style="font-style:italic">T</span>
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#b08000">12 </span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#b08000">20</span><span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">MemoryMin</span> = invalid
|
|
<span style="color:#898887"># invalid bytes suffix</span>
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#b08000">12</span>g
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#b08000">12</span>H
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#b08000">12 </span>E
|
|
<span style="color:#0057ae">MemoryMin</span> = <span style="color:#b08000">12</span>P
|
|
|
|
|
|
<span style="color:#898887">###### cardinal KGMT</span>
|
|
<span style="font-weight:bold">[Socket]</span>
|
|
<span style="color:#0057ae">PipeSize</span> = <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">PipeSize</span> = <span style="color:#b08000">12</span><span style="font-style:italic">K</span>
|
|
<span style="color:#0057ae">PipeSize</span> = <span style="color:#b08000">12</span><span style="font-style:italic">M</span>
|
|
<span style="color:#0057ae">PipeSize</span> = <span style="color:#b08000">12</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">PipeSize</span> = <span style="color:#b08000">12</span><span style="font-style:italic">T</span>
|
|
<span style="color:#0057ae">PipeSize</span> = <span style="color:#b08000">12 </span><span style="font-style:italic">G</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">PipeSize</span> = invalid
|
|
<span style="color:#0057ae">PipeSize</span> = infinity
|
|
<span style="color:#898887"># invalid bytes suffix</span>
|
|
<span style="color:#0057ae">PipeSize</span> = <span style="color:#b08000">12</span>g
|
|
<span style="color:#0057ae">PipeSize</span> = <span style="color:#b08000">12</span>H
|
|
<span style="color:#0057ae">PipeSize</span> = <span style="color:#b08000">12 </span>E
|
|
<span style="color:#0057ae">PipeSize</span> = <span style="color:#b08000">12</span>P
|
|
<span style="color:#0057ae">PipeSize</span> = <span style="color:#b08000">20</span>%
|
|
|
|
|
|
<span style="color:#898887">###### cardinal KGMT infinity</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#b08000">12</span><span style="font-style:italic">K</span>
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#b08000">12</span><span style="font-style:italic">M</span>
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#b08000">12</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#b08000">12</span><span style="font-style:italic">T</span>
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#b08000">12 </span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">MemorySwapMax</span> = invalid
|
|
<span style="color:#898887"># invalid bytes suffix</span>
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#b08000">12</span>g
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#b08000">12</span>H
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#b08000">12 </span>E
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#b08000">12</span>P
|
|
<span style="color:#0057ae">MemorySwapMax</span> = <span style="color:#b08000">20</span>%
|
|
|
|
|
|
<span style="color:#898887">###### collect mode</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">CollectMode</span> = <span style="color:#aa5500">inactive</span>
|
|
<span style="color:#0057ae">CollectMode</span> = <span style="color:#aa5500">inactive-or-failed</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">CollectMode</span> = invalid
|
|
<span style="color:#0057ae">CollectMode</span> = invalid <span style="color:#aa5500">inactive</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">CollectMode</span> = <span style="color:#aa5500">inactive-or-failed</span> inactive
|
|
|
|
|
|
<span style="color:#898887">###### condition needs update</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">ConditionNeedsUpdate</span> = <span style="color:#ff5500">!</span>/etc
|
|
<span style="color:#0057ae">ConditionNeedsUpdate</span> = <span style="color:#ff5500">!</span>/var
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ConditionNeedsUpdate</span> = /home
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ConditionNeedsUpdate</span> = /etc /var
|
|
|
|
|
|
<span style="color:#898887">###### condition user</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">ConditionUser</span> = <span style="color:#aa5500">@system</span>
|
|
<span style="color:#0057ae">ConditionUser</span> = name1
|
|
<span style="color:#0057ae">ConditionUser</span> = <span style="color:#b08000">1050</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ConditionUser</span> = -1050
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ConditionUser</span> = <span style="color:#aa5500">@system</span> 1050
|
|
|
|
|
|
<span style="color:#898887">###### controller cg (control group controller)</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#aa5500">cpu</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#aa5500">io</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#aa5500">memory</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#aa5500">pids</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#aa5500">v1</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#aa5500">v2</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = <span style="color:#aa5500">cpu</span> <span style="color:#aa5500">memory</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">AssertControlGroupController</span> = invalid
|
|
|
|
|
|
<span style="color:#898887">###### controller list</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#898887"># single controller</span>
|
|
<span style="color:#0057ae">DisableControllers</span> = <span style="color:#aa5500">blkio</span>
|
|
<span style="color:#0057ae">DisableControllers</span> = <span style="color:#aa5500">bpf-devices</span>
|
|
<span style="color:#0057ae">DisableControllers</span> = <span style="color:#aa5500">bpf-firewall</span>
|
|
<span style="color:#0057ae">DisableControllers</span> = <span style="color:#aa5500">cpu</span>
|
|
<span style="color:#0057ae">DisableControllers</span> = <span style="color:#aa5500">cpuacct</span>
|
|
<span style="color:#0057ae">DisableControllers</span> = <span style="color:#aa5500">cpuset</span>
|
|
<span style="color:#0057ae">DisableControllers</span> = <span style="color:#aa5500">devices</span>
|
|
<span style="color:#0057ae">DisableControllers</span> = <span style="color:#aa5500">io</span>
|
|
<span style="color:#0057ae">DisableControllers</span> = <span style="color:#aa5500">memory</span>
|
|
<span style="color:#0057ae">DisableControllers</span> = <span style="color:#aa5500">pids</span>
|
|
<span style="color:#898887"># multiple controllers</span>
|
|
<span style="color:#0057ae">DisableControllers</span> = <span style="color:#aa5500">cpu</span> <span style="color:#aa5500">io</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">memory</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">DisableControllers</span> = dev invalid
|
|
|
|
|
|
<span style="color:#898887">###### cpu affinity</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#898887"># either "numa" or any of the values for "cpu index list"</span>
|
|
<span style="color:#0057ae">CPUAffinity</span> = <span style="color:#aa5500">numa</span>
|
|
<span style="color:#0057ae">CPUAffinity</span> = <span style="color:#b08000">0</span> <span style="color:#b08000">1</span>, <span style="color:#b08000">2</span> , <span style="font-weight:bold">\</span>
|
|
<span style="color:#b08000">3</span>, <span style="color:#b08000">4-8</span> , <span style="color:#b08000">10 - 12</span>
|
|
<span style="color:#898887"># since version 249 specifiers are supported</span>
|
|
<span style="color:#0057ae">CPUAffinity</span> = <span style="color:#3daee9">%I</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">CPUAffinity</span> = numa-x
|
|
<span style="color:#898887"># no multiple "numa"</span>
|
|
<span style="color:#0057ae">CPUAffinity</span> = <span style="color:#aa5500">numa</span> numa
|
|
<span style="color:#898887"># no CPU index list and "numa"</span>
|
|
<span style="color:#0057ae">CPUAffinity</span> = <span style="color:#aa5500">numa</span> 0 1 2
|
|
<span style="color:#0057ae">CPUAffinity</span> = <span style="color:#b08000">0</span> <span style="color:#b08000">1</span> <span style="color:#b08000">2</span> numa
|
|
|
|
|
|
<span style="color:#898887">###### cpu feature</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">abm</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">adx</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">aes</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">apic</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">avx</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">avx2</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">bmi1</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">bmi2</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">clflush</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">cmov</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">constant_tsc</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">cx16</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">cx8</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">de</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">f16c</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">fma3</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">fpu</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">fxsr</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">ht</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">lahf_lm</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">lm</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">mca</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">mce</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">mmx</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">monitor</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">movbe</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">msr</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">mtrr</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">osxsave</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">pae</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">pat</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">pclmul</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">pge</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">pni</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">popcnt</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">pse</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">pse36</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">rdrand</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">rdseed</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">rdtscp</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">sep</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">sha_ni</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">sse</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">sse2</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">sse4_1</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">sse4_2</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">ssse3</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">syscall</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">tsc</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">vme</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">xsave</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ConditionCPUFeature</span> = <span style="color:#aa5500">tsc</span> mmx
|
|
|
|
|
|
<span style="color:#898887">###### cpu index list</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">NUMAMask</span> = <span style="color:#b08000">0</span> <span style="color:#b08000">1</span> <span style="color:#b08000">2</span>
|
|
<span style="color:#0057ae">NUMAMask</span> = <span style="color:#b08000">0</span>,<span style="color:#b08000">1</span>, <span style="color:#b08000">2</span>
|
|
<span style="color:#898887"># using ranges</span>
|
|
<span style="color:#0057ae">NUMAMask</span> = <span style="color:#b08000">0-2</span>
|
|
<span style="color:#0057ae">NUMAMask</span> = <span style="color:#b08000">0 - 2</span>
|
|
<span style="color:#0057ae">NUMAMask</span> = <span style="color:#b08000">0</span> <span style="color:#b08000">1</span>, <span style="color:#b08000">2</span> , <span style="font-weight:bold">\</span>
|
|
<span style="color:#b08000">3</span>, <span style="color:#b08000">4-8</span> ,
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">NUMAMask</span> = <span style="color:#b08000">0</span> invalid <span style="color:#b08000">2</span>, <span style="color:#b08000">3</span>;<span style="color:#b08000">4</span>
|
|
<span style="color:#0057ae">NUMAMask</span> = <span style="color:#b08000">0</span>-a1
|
|
<span style="color:#0057ae">NUMAMask</span> = numa
|
|
|
|
|
|
<span style="color:#898887">###### cpu scheduling policy</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">CPUSchedulingPolicy</span> = <span style="color:#aa5500">batch</span>
|
|
<span style="color:#0057ae">CPUSchedulingPolicy</span> = <span style="color:#aa5500">fifo</span>
|
|
<span style="color:#0057ae">CPUSchedulingPolicy</span> = <span style="color:#aa5500">idle</span>
|
|
<span style="color:#0057ae">CPUSchedulingPolicy</span> = <span style="color:#aa5500">other</span>
|
|
<span style="color:#0057ae">CPUSchedulingPolicy</span> = <span style="color:#aa5500">rr</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">CPUSchedulingPolicy</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">CPUSchedulingPolicy</span> = <span style="color:#aa5500">batch</span> fifo
|
|
|
|
|
|
<span style="color:#898887">###### cpu scheduling priority</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">CPUSchedulingPriority</span> = <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">CPUSchedulingPriority</span> = <span style="color:#b08000">99</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">CPUSchedulingPriority</span> = invalid
|
|
<span style="color:#0057ae">CPUSchedulingPriority</span> = -<span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">CPUSchedulingPriority</span> = 0.<span style="color:#b08000">12</span>
|
|
<span style="color:#898887"># out of range</span>
|
|
<span style="color:#0057ae">CPUSchedulingPriority</span> = 0
|
|
<span style="color:#0057ae">CPUSchedulingPriority</span> = 100
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">CPUSchedulingPriority</span> = <span style="color:#b08000">12</span> 34
|
|
|
|
|
|
<span style="color:#898887">###### cpu weight</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = <span style="color:#aa5500">idle</span>
|
|
<span style="color:#898887"># integer 1..10000</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = <span style="color:#b08000">1</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = <span style="color:#b08000">1234</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = <span style="color:#b08000">1234</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = <span style="color:#b08000">10000</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = -<span style="color:#b08000">1</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = 0
|
|
<span style="color:#0057ae">CPUWeight</span> = 1000<span style="color:#b08000">1</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = 1<span style="color:#b08000">2345</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = 12.<span style="color:#b08000">3</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">CPUWeight</span> = 1 <span style="color:#b08000">10000</span>
|
|
|
|
|
|
<span style="color:#898887">###### delegate</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#898887"># single boolean</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#898887"># single controller</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">blkio</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">bpf-devices</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">bpf-firewall</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">cpu</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">cpuacct</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">cpuset</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">devices</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">io</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">memory</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">pids</span>
|
|
<span style="color:#898887"># multiple controllers</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">cpu</span> <span style="color:#aa5500">io</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">memory</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">Delegate</span> = i<span style="color:#aa5500">n</span>valid
|
|
<span style="color:#898887"># multiple boolean values</span>
|
|
<span style="color:#0057ae">Delegate</span> = <span style="color:#aa5500">on</span> off
|
|
|
|
|
|
<span style="color:#898887">###### device cardinal KMGT</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">12</span><span style="font-style:italic">K</span>
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">12</span><span style="font-style:italic">M</span>
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">12</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">12</span><span style="font-style:italic">T</span>
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">12 </span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="font-weight:bold">\</span>
|
|
<span style="color:#b08000">10</span><span style="font-style:italic">M</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">20</span>%
|
|
<span style="color:#898887"># invalid multiplier suffix</span>
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">12</span>g
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">12</span>E
|
|
<span style="color:#898887"># no device</span>
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = 10
|
|
<span style="color:#0057ae">IOReadIOPSMax</span> = 10M
|
|
|
|
|
|
<span style="color:#898887">###### device policy</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">DevicePolicy</span> = <span style="color:#aa5500">auto</span>
|
|
<span style="color:#0057ae">DevicePolicy</span> = <span style="color:#aa5500">closed</span>
|
|
<span style="color:#0057ae">DevicePolicy</span> = <span style="color:#aa5500">strict</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">DevicePolicy</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">DevicePolicy</span> = <span style="color:#aa5500">auto</span> closed
|
|
|
|
|
|
<span style="color:#898887">###### device time span</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">IODeviceLatencyTargetSec</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">IODeviceLatencyTargetSec</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#b08000">5</span><span style="font-style:italic">s</span> <span style="color:#b08000">20</span><span style="font-style:italic">ms</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#b08000">100</span><span style="font-style:italic">us</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#898887"># no device</span>
|
|
<span style="color:#0057ae">IODeviceLatencyTargetSec</span> = 123
|
|
<span style="color:#0057ae">IODeviceLatencyTargetSec</span> = 5s 20ms 100us
|
|
|
|
|
|
<span style="color:#898887">###### exec</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#898887"># specifier and environment variable</span>
|
|
<span style="color:#0057ae">ExecStart</span> = /some/cmd <span style="color:#3daee9">%u</span> arg <span style="color:#0057ae">$var1</span> inside<span style="color:#0057ae">${var2}</span>word <span style="color:#0057ae">${var3}</span> <span style="color:#0057ae">$var4</span>
|
|
<span style="color:#0057ae">ExecStart</span> = cmd1 <span style="color:#3daee9">%h</span> arg1_1 <span style="color:#0057ae">$var1</span>, cmd2 <span style="color:#3daee9">%u</span> arg2_1 <span style="color:#0057ae">$var2_1</span><span style="font-weight:bold">\</span>
|
|
<span style="color:#0057ae">$var2_2</span>
|
|
<span style="color:#898887"># escapes (not exactly the same as detected by HlCStringChar)</span>
|
|
<span style="color:#0057ae">ExecStart</span> = cmd \, <span style="color:#3daee9">\'</span> <span style="color:#3daee9">\"</span> \\ \a <span style="color:#3daee9">\b</span> <span style="color:#3daee9">\f</span> <span style="color:#3daee9">\n</span> <span style="color:#3daee9">\r</span> <span style="color:#3daee9">\s</span> <span style="color:#3daee9">\t</span> <span style="color:#3daee9">\v</span> <span style="color:#3daee9">\x0A</span> <span style="color:#3daee9">\012</span> <span style="color:#3daee9">\u1234</span> <span style="color:#3daee9">\U12abcdef</span>
|
|
<span style="color:#898887"># prefix</span>
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">@</span>/some/cmd arg "@!+-:"
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">-</span>/some/cmd-1 -option arg
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">:</span>/some/cmd arg
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">+</span>/some/cmd arg
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">!</span>/some/cmd arg
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">!!</span>/some/cmd arg
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">@:-!!</span>/some/cmd arg
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">@!!-:</span>/some/cmd arg
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">@:-+</span>/some/cmd arg
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#898887"># invalid prefix</span>
|
|
<span style="color:#0057ae">ExecStart</span> = @ /some/cmd arg
|
|
<span style="color:#0057ae">ExecStart</span> = @ -/some/cmd arg
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">+</span>!/some/cmd arg
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">!!</span>!/some/cmd arg
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">@</span>+@/some/cmd arg
|
|
<span style="color:#0057ae">ExecStart</span> = <span style="color:#ff5500">@!!</span>+/some/cmd arg
|
|
|
|
|
|
<span style="color:#898887">###### exit status</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#b08000">75</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">ADDRESS_FAMILIES</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">APPARMOR</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">BPF</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">CACHE_DIRECTORY</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">CANTCREAT</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">CAPABILITIES</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">CGROUP</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">CHDIR</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">CHOWN</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">CHROOT</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">CONFIG</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">CONFIGURATION_DIRECTORY</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">CONFIRM</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">CPUAFFINITY</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">CREDENTIALS</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">DATAERR</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">EXCEPTION</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">EXEC</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">FAILURE</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">FDS</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">GROUP</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">INVALIDARGUMENT</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">IOERR</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">IOPRIO</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">KEYRING</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">LIMITS</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">LOGS_DIRECTORY</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">MEMORY</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NAMESPACE</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NETWORK</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NICE</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NOHOST</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NOINPUT</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NOPERM</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NOPERMISSION</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NOTCONFIGURED</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NOTIMPLEMENTED</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NOTINSTALLED</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NOTRUNNING</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NOUSER</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NO_NEW_PRIVILEGES</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">NUMA_POLICY</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">OOM_ADJUST</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">OSERR</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">OSFILE</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">PAM</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">PERSONALITY</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">PROTOCOL</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">RUNTIME_DIRECTORY</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">SECCOMP</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">SECUREBITS</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">SELINUX_CONTEXT</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">SETSCHEDULER</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">SETSID</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">SIGNAL_MASK</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">SMACK_PROCESS_LABEL</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">SOFTWARE</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">STATE_DIRECTORY</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">STDERR</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">STDIN</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">STDOUT</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">SUCCESS</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">TEMPFAIL</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">TIMERSLACK</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">UNAVAILABLE</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">USAGE</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">USER</span>
|
|
<span style="color:#898887"># using signals (see values for context "signal" for a complete list of values)</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">SIGABRT</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = <span style="color:#aa5500">ADDRESS_FAMILIES</span> <span style="color:#b08000">75</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#b08000">23</span> <span style="color:#aa5500">SIGHUP</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = invalid
|
|
<span style="color:#0057ae">SuccessExitStatus</span> = -23
|
|
|
|
|
|
<span style="color:#898887">###### exit type</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">ExitType</span> = <span style="color:#aa5500">main</span>
|
|
<span style="color:#0057ae">ExitType</span> = <span style="color:#aa5500">cgroup</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ExitType</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ExitType</span> = <span style="color:#aa5500">main</span> cgroup
|
|
|
|
|
|
<span style="color:#898887">###### failure mode</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">TimeoutStartFailureMode</span> = <span style="color:#aa5500">abort</span>
|
|
<span style="color:#0057ae">TimeoutStartFailureMode</span> = <span style="color:#aa5500">kill</span>
|
|
<span style="color:#0057ae">TimeoutStartFailureMode</span> = <span style="color:#aa5500">terminate</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">TimeoutStartFailureMode</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">TimeoutStartFailureMode</span> = <span style="color:#aa5500">abort</span> kill
|
|
|
|
|
|
<span style="color:#898887">###### file mode</span>
|
|
<span style="font-weight:bold">[Automount]</span>
|
|
<span style="color:#0057ae">DirectoryMode</span> = <span style="color:#b08000">755</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">DirectoryMode</span> = invalid
|
|
<span style="color:#898887"># need octal digits</span>
|
|
<span style="color:#0057ae">DirectoryMode</span> = <span style="color:#b08000">075</span>8
|
|
<span style="color:#0057ae">DirectoryMode</span> = <span style="color:#b08000">075</span>A
|
|
<span style="color:#898887"># need 3 to 4 octal digits</span>
|
|
<span style="color:#0057ae">DirectoryMode</span> = 07
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">DirectoryMode</span> = <span style="color:#b08000">0755</span> 0755
|
|
|
|
|
|
<span style="color:#898887">###### firmware</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">ConditionFirmware</span> = <span style="color:#aa5500">uefi</span>
|
|
<span style="color:#0057ae">ConditionFirmware</span> = <span style="color:#aa5500">device-tree</span>
|
|
<span style="color:#0057ae">ConditionFirmware</span> = <span style="color:#aa5500">device-tree-compatible</span>(some-device-tree)
|
|
<span style="color:#0057ae">ConditionFirmware</span> = <span style="color:#aa5500">device-tree-compatible</span>( some-device-tree )
|
|
<span style="color:#0057ae">ConditionFirmware</span> = <span style="color:#aa5500">smbios-field</span>(board_name = "Custom Board")
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ConditionFirmware</span> = invalid
|
|
<span style="color:#0057ae">ConditionFirmware</span> = <span style="color:#aa5500">device-tree</span>-invalid
|
|
<span style="color:#898887"># missing argument</span>
|
|
<span style="color:#0057ae">ConditionFirmware</span> = <span style="color:#aa5500">device-tree</span>-compatible
|
|
<span style="color:#0057ae">ConditionFirmware</span> = <span style="color:#aa5500">device-tree</span>-compatible()
|
|
<span style="color:#0057ae">ConditionFirmware</span> = smbios-field
|
|
<span style="color:#0057ae">ConditionFirmware</span> = smbios-field()
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ConditionFirmware</span> = <span style="color:#aa5500">uefi</span> device-tree
|
|
|
|
|
|
<span style="color:#898887">###### fs set</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">RestrictFileSystems</span> = <span style="color:#aa5500">@auxiliary-api</span>
|
|
<span style="color:#0057ae">RestrictFileSystems</span> = <span style="color:#aa5500">@basic-api</span>
|
|
<span style="color:#0057ae">RestrictFileSystems</span> = <span style="color:#aa5500">@common-block</span>
|
|
<span style="color:#0057ae">RestrictFileSystems</span> = <span style="color:#aa5500">@historical-block</span>
|
|
<span style="color:#0057ae">RestrictFileSystems</span> = <span style="color:#aa5500">@known</span>
|
|
<span style="color:#0057ae">RestrictFileSystems</span> = <span style="color:#aa5500">@network</span>
|
|
<span style="color:#0057ae">RestrictFileSystems</span> = <span style="color:#aa5500">@privileged-api</span>
|
|
<span style="color:#0057ae">RestrictFileSystems</span> = <span style="color:#aa5500">@temporary</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">RestrictFileSystems</span> = invalid
|
|
<span style="color:#0057ae">RestrictFileSystems</span> = temporary
|
|
|
|
|
|
<span style="color:#898887">###### fs type</span>
|
|
<span style="color:#898887"># A selection of file system types to be used as `Type` in mount units.</span>
|
|
<span style="font-weight:bold">[Mount]</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">binfmt_misc</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">btrfs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">configfs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">debugfs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">devtmpfs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">efivarfs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">exfat</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">ext2</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">ext3</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">ext4</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">f2fs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">fuse</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">fusectl</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">gfs2</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">hugetlbfs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">iso9660</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">jfs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">mqueue</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">msdos</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">nfs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">nilfs2</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">ntfs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">ntfs3</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">ocfs2</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">overlay</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">proc</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">reiserfs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">tmpfs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">tracefs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">udf</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">vfat</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">virtiofs</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">xfs</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">Type</span> = invalid
|
|
<span style="color:#0057ae">Type</span> = invalid <span style="color:#aa5500">ext4</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">btrfs</span> ext4
|
|
|
|
|
|
<span style="color:#898887">###### fs type set list</span>
|
|
<span style="color:#898887">## list of fs type names and fs set names</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">RestrictFileSystems</span> = <span style="color:#aa5500">@auxiliary-api</span> <span style="color:#aa5500">btrfs</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">nfs</span> <span style="color:#aa5500">@temporary</span> unknown
|
|
|
|
|
|
<span style="color:#898887">###### group and user</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">User</span> = <span style="color:#b08000">0</span>
|
|
<span style="color:#0057ae">User</span> = <span style="color:#b08000">1000</span>
|
|
<span style="color:#0057ae">Group</span> = <span style="color:#b08000">100</span>
|
|
<span style="color:#0057ae">User</span> = some-name
|
|
<span style="color:#0057ae">Group</span> = some_name
|
|
<span style="color:#0057ae">User</span> = _some-name-1
|
|
<span style="color:#0057ae">User</span> = name1
|
|
<span style="color:#898887"># using specifiers</span>
|
|
<span style="color:#0057ae">User</span> = <span style="color:#3daee9">%i</span>
|
|
<span style="color:#0057ae">User</span> = name-<span style="color:#3daee9">%i</span>
|
|
<span style="color:#0057ae">User</span> = some-<span style="color:#3daee9">%i</span>-name
|
|
<span style="color:#0057ae">User</span> = <span style="color:#3daee9">%U</span>-name
|
|
<span style="color:#0057ae">User</span> = some-<span style="color:#3daee9">%i</span>-name-<span style="color:#3daee9">%U</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#898887"># no negative integers</span>
|
|
<span style="color:#0057ae">User</span> = -1000
|
|
<span style="color:#898887"># no float</span>
|
|
<span style="color:#0057ae">User</span> = <span style="color:#b08000">100</span>.0
|
|
<span style="color:#898887"># no name with leading digit</span>
|
|
<span style="color:#0057ae">User</span> = <span style="color:#b08000">1</span>name
|
|
<span style="color:#898887"># no name with leading hyphen</span>
|
|
<span style="color:#0057ae">User</span> = -name
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">User</span> = <span style="color:#b08000">1000</span> 1001
|
|
|
|
|
|
<span style="color:#898887">###### group list</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">SupplementaryGroups</span> = some-name <span style="color:#3daee9">%U</span> some<span style="color:#3daee9">%i</span>name <span style="font-weight:bold">\</span>
|
|
<span style="color:#3daee9">%U</span>name <span style="color:#b08000">1001</span> name<span style="color:#3daee9">%U</span>
|
|
|
|
|
|
<span style="color:#898887">###### io scheduling class</span>
|
|
<span style="color:#898887"># see systemd.exec</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = <span style="color:#b08000">0</span>
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = <span style="color:#b08000">1</span>
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = <span style="color:#b08000">2</span>
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = <span style="color:#b08000">3</span>
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = <span style="color:#aa5500">best-effort</span>
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = <span style="color:#aa5500">idle</span>
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = <span style="color:#aa5500">realtime</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = invalid
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = none
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = 4
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = <span style="color:#b08000">1</span>23
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = -<span style="color:#b08000">1</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = <span style="color:#b08000">1</span> idle
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = <span style="color:#aa5500">idle</span> idle
|
|
<span style="color:#0057ae">IOSchedulingClass</span> = <span style="color:#aa5500">idle</span> 1
|
|
|
|
|
|
<span style="color:#898887">###### ip address list</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">IPAddressAllow</span> = <span style="color:#aa5500">any</span>
|
|
<span style="color:#0057ae">IPAddressAllow</span> = <span style="color:#aa5500">localhost</span>
|
|
<span style="color:#0057ae">IPAddressAllow</span> = <span style="color:#aa5500">link-local</span>
|
|
<span style="color:#0057ae">IPAddressDeny</span> = <span style="color:#aa5500">multicast</span>
|
|
<span style="color:#0057ae">IPAddressAllow</span> = <span style="color:#aa5500">localhost</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">multicast</span>
|
|
<span style="color:#0057ae">IPAddressAllow</span> = <span style="color:#b08000">127</span>.<span style="color:#b08000">0</span>.<span style="color:#b08000">0</span>.<span style="color:#b08000">0</span>/<span style="color:#b08000">8</span> ::<span style="color:#b08000">1</span>/<span style="color:#b08000">128</span> <span style="color:#b08000">169</span>.<span style="color:#b08000">254</span>.<span style="color:#b08000">0</span>.<span style="color:#b08000">0</span>/<span style="color:#b08000">16</span> <span style="color:#b08000">fe80</span>::/<span style="color:#b08000">64</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">IPAddressAllow</span> = inv<span style="color:#b08000">a</span>li<span style="color:#b08000">d</span>
|
|
|
|
|
|
<span style="color:#898887">###### ip bind</span>
|
|
<span style="font-weight:bold">[Socket]</span>
|
|
<span style="color:#0057ae">BindIPv6Only</span> = <span style="color:#aa5500">both</span>
|
|
<span style="color:#0057ae">BindIPv6Only</span> = <span style="color:#aa5500">default</span>
|
|
<span style="color:#0057ae">BindIPv6Only</span> = <span style="color:#aa5500">ipv6-only</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">BindIPv6Only</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">BindIPv6Only</span> = <span style="color:#aa5500">both</span> default
|
|
|
|
|
|
<span style="color:#898887">###### io scheduling priority</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = <span style="color:#b08000">0</span>
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = <span style="color:#b08000">1</span>
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = <span style="color:#b08000">2</span>
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = <span style="color:#b08000">3</span>
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = <span style="color:#b08000">4</span>
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = <span style="color:#b08000">5</span>
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = <span style="color:#b08000">6</span>
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = <span style="color:#b08000">7</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = 8
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = <span style="color:#b08000">1</span>23
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = -<span style="color:#b08000">1</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">IOSchedulingPriority</span> = <span style="color:#b08000">0</span> 3
|
|
|
|
|
|
<span style="color:#898887">###### ip tos (terms-of-service)</span>
|
|
<span style="font-weight:bold">[Socket]</span>
|
|
<span style="color:#0057ae">IPTOS</span> = <span style="color:#b08000">15</span>
|
|
<span style="color:#0057ae">IPTOS</span> = <span style="color:#aa5500">low-cost</span>
|
|
<span style="color:#0057ae">IPTOS</span> = <span style="color:#aa5500">low-delay</span>
|
|
<span style="color:#0057ae">IPTOS</span> = <span style="color:#aa5500">reliability</span>
|
|
<span style="color:#0057ae">IPTOS</span> = <span style="color:#aa5500">throughput</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">IPTOS</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">IPTOS</span> = <span style="color:#b08000">15</span> 20
|
|
<span style="color:#0057ae">IPTOS</span> = <span style="color:#aa5500">low-delay</span> 15
|
|
|
|
|
|
<span style="color:#898887">###### keyring mode</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">KeyringMode</span> = <span style="color:#aa5500">inherit</span>
|
|
<span style="color:#0057ae">KeyringMode</span> = <span style="color:#aa5500">private</span>
|
|
<span style="color:#0057ae">KeyringMode</span> = <span style="color:#aa5500">shared</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">KeyringMode</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">KeyringMode</span> = <span style="color:#aa5500">shared</span> private
|
|
|
|
|
|
<span style="color:#898887">###### kill mode</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">KillMode</span> = <span style="color:#aa5500">control-group</span>
|
|
<span style="color:#0057ae">KillMode</span> = <span style="color:#aa5500">mixed</span>
|
|
<span style="color:#0057ae">KillMode</span> = <span style="color:#aa5500">none</span>
|
|
<span style="color:#0057ae">KillMode</span> = <span style="color:#aa5500">process</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">KillMode</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">KillMode</span> = <span style="color:#aa5500">mixed</span> process
|
|
|
|
|
|
<span style="color:#898887">###### limit bytes</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span><span style="font-style:italic">K</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span><span style="font-style:italic">M</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span><span style="font-style:italic">T</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span><span style="font-style:italic">P</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span><span style="font-style:italic">E</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span> <span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span><span style="font-style:italic">G</span>:<span style="color:#b08000">24</span><span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span> <span style="font-style:italic">G</span>:<span style="color:#b08000">24</span> <span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span> <span style="font-style:italic">G</span>: <span style="color:#b08000">24</span> <span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span> <span style="font-style:italic">G</span> :<span style="color:#b08000">24</span> <span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span> <span style="font-style:italic">G</span> : <span style="color:#b08000">24</span> <span style="font-style:italic">G</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = invalid
|
|
<span style="color:#898887"># invalid bytes suffix</span>
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span>g
|
|
<span style="color:#0057ae">LimitFSIZE</span> = <span style="color:#b08000">12</span>H
|
|
|
|
|
|
<span style="color:#898887">###### limit nice level</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">-1</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">-12</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">-20</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">+1</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">+12</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">+19</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">0</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">9</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">23</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">34</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">40</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">-10</span>:<span style="color:#b08000">+10</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">20</span>:<span style="color:#b08000">30</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = invalid
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">0</span>.<span style="color:#b08000">2</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#b08000">20</span> : <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = <span style="color:#aa5500">infinity</span> : 20
|
|
<span style="color:#898887"># out of range</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = -<span style="color:#b08000">21</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = -123
|
|
<span style="color:#0057ae">LimitNICE</span> = +<span style="color:#b08000">20</span>
|
|
<span style="color:#0057ae">LimitNICE</span> = +123
|
|
<span style="color:#0057ae">LimitNICE</span> = 41
|
|
<span style="color:#0057ae">LimitNICE</span> = 123
|
|
|
|
|
|
<span style="color:#898887">###### limit number</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">LimitNOFILE</span> = <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">LimitNOFILE</span> = <span style="color:#b08000">123</span>:<span style="color:#b08000">321</span>
|
|
<span style="color:#0057ae">LimitNOFILE</span> = <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">LimitNOFILE</span> = invalid
|
|
<span style="color:#898887"># negative values</span>
|
|
<span style="color:#0057ae">LimitNOFILE</span> = -123
|
|
|
|
|
|
<span style="color:#898887">###### limit time span</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">LimitCPU</span> = <span style="color:#b08000">15</span><span style="font-style:italic">s</span> <span style="color:#b08000">10</span><span style="font-style:italic">us</span> : <span style="color:#b08000">20</span><span style="font-style:italic">s</span> <span style="color:#b08000">5</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#0057ae">LimitCPU</span> = <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#898887"># only a single infinity</span>
|
|
<span style="color:#0057ae">LimitCPU</span> = <span style="color:#aa5500">infinity</span> : infinity
|
|
<span style="color:#0057ae">LimitCPU</span> = <span style="color:#aa5500">infinity</span> : 10s 15ms
|
|
<span style="color:#0057ae">LimitCPU</span> = <span style="color:#b08000">10</span><span style="font-style:italic">s</span> <span style="color:#b08000">15</span><span style="font-style:italic">ms</span> : <span style="color:#aa5500">infinity</span>
|
|
|
|
|
|
<span style="color:#898887">###### log facility</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">auth</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">authpriv</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">cron</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">daemon</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">ftp</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">kern</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">local0</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">local1</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">local2</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">local3</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">local4</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">local5</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">local6</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">local7</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">lpr</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">mail</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">news</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">syslog</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">user</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">uucp</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">SyslogFacility</span> = <span style="color:#aa5500">cron</span> daemon
|
|
|
|
|
|
<span style="color:#898887">###### log level</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">LogLevelMax</span> = <span style="color:#aa5500">alert</span>
|
|
<span style="color:#0057ae">LogLevelMax</span> = <span style="color:#aa5500">crit</span>
|
|
<span style="color:#0057ae">LogLevelMax</span> = <span style="color:#aa5500">debug</span>
|
|
<span style="color:#0057ae">LogLevelMax</span> = <span style="color:#aa5500">emerg</span>
|
|
<span style="color:#0057ae">LogLevelMax</span> = <span style="color:#aa5500">err</span>
|
|
<span style="color:#0057ae">LogLevelMax</span> = <span style="color:#aa5500">info</span>
|
|
<span style="color:#0057ae">LogLevelMax</span> = <span style="color:#aa5500">notice</span>
|
|
<span style="color:#0057ae">LogLevelMax</span> = <span style="color:#aa5500">warning</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">LogLevelMax</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">LogLevelMax</span> = <span style="color:#aa5500">info</span> notice
|
|
|
|
|
|
<span style="color:#898887">###### memory mapping</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">all</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">default</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">private-anonymous</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">shared-anonymous</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">private-file-backed</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">shared-file-backed</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">elf-headers</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">private-huge</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">shared-huge</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">private-dax</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">shared-dax</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">private-file-backed</span> <span style="color:#aa5500">shared-dax</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = invalid
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">private-file-backed</span> invalid <span style="color:#aa5500">elf-headers</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = invalid <span style="color:#aa5500">shared-dax</span>
|
|
<span style="color:#898887"># only spaces as separator</span>
|
|
<span style="color:#0057ae">CoredumpFilter</span> = <span style="color:#aa5500">private-file-backed</span>, <span style="color:#aa5500">shared-dax</span>
|
|
|
|
|
|
<span style="color:#898887">###### memory pressure watch</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = <span style="color:#aa5500">auto</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = <span style="color:#aa5500">skip</span>
|
|
<span style="color:#898887">## should accept any boolean value</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = <span style="color:#aa5500">on</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = <span style="color:#aa5500">1</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = <span style="color:#aa5500">off</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = <span style="color:#aa5500">0</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = i<span style="color:#aa5500">n</span>valid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">MemoryPressureWatch</span> = <span style="color:#aa5500">auto</span> skip
|
|
|
|
|
|
<span style="color:#898887">###### mount flag</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">MountFlags</span> = <span style="color:#aa5500">private</span>
|
|
<span style="color:#0057ae">MountFlags</span> = <span style="color:#aa5500">shared</span>
|
|
<span style="color:#0057ae">MountFlags</span> = <span style="color:#aa5500">slave</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">MountFlags</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">MountFlags</span> = <span style="color:#aa5500">shared</span> slave
|
|
|
|
|
|
<span style="color:#898887">###### nft set list</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">NFTSet</span> = <span style="color:#aa5500">cgroup</span>:<span style="color:#aa5500">arp</span>::filter::my_service
|
|
<span style="color:#0057ae">NFTSet</span> = <span style="color:#aa5500">cgroup</span>:<span style="color:#aa5500">bridge</span>::filter::my_service
|
|
<span style="color:#0057ae">NFTSet</span> = <span style="color:#aa5500">cgroup</span>:<span style="color:#aa5500">inet</span>::filter::my_service
|
|
<span style="color:#0057ae">NFTSet</span> = <span style="color:#aa5500">cgroup</span>:<span style="color:#aa5500">ip</span>::filter::my_service
|
|
<span style="color:#0057ae">NFTSet</span> = <span style="color:#aa5500">cgroup</span>:<span style="color:#aa5500">ip6</span>::filter::my_service
|
|
<span style="color:#0057ae">NFTSet</span> = <span style="color:#aa5500">cgroup</span>:<span style="color:#aa5500">ip</span>::filter::my_service
|
|
<span style="color:#0057ae">NFTSet</span> = <span style="color:#aa5500">cgroup</span>:<span style="color:#aa5500">netdev</span>::filter::my_service
|
|
<span style="color:#0057ae">NFTSet</span> = <span style="color:#aa5500">group</span>:<span style="color:#aa5500">inet</span>::filter::my_service
|
|
<span style="color:#0057ae">NFTSet</span> = <span style="color:#aa5500">user</span>:<span style="color:#aa5500">inet</span>::filter::my_service
|
|
<span style="color:#898887">## multiple sets</span>
|
|
<span style="color:#0057ae">NFTSet</span> = <span style="color:#aa5500">cgroup</span>:<span style="color:#aa5500">inet</span>:filter:my_service <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">user</span>:<span style="color:#aa5500">inet</span>:filter:serviceuser
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">NFTSet</span> = invalid:inet::filter::my_service
|
|
<span style="color:#0057ae">NFTSet</span> = <span style="color:#aa5500">cgroup</span>::invalid::filter::my_service
|
|
|
|
|
|
<span style="color:#898887">###### nice level</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">-1</span>
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">-12</span>
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">-20</span>
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">+1</span>
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">+12</span>
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">+19</span>
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">0</span>
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">19</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">Nice</span> = invalid
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">0</span>.2
|
|
<span style="color:#898887"># out of range</span>
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">-2</span>1
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">-12</span>3
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">+2</span>0
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">+12</span>3
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">2</span>0
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">3</span>0
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">12</span>3
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">Nice</span> = <span style="color:#b08000">12</span> 34
|
|
|
|
|
|
<span style="color:#898887">###### notify access</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">NotifyAccess</span> = <span style="color:#aa5500">all</span>
|
|
<span style="color:#0057ae">NotifyAccess</span> = <span style="color:#aa5500">exec</span>
|
|
<span style="color:#0057ae">NotifyAccess</span> = <span style="color:#aa5500">main</span>
|
|
<span style="color:#0057ae">NotifyAccess</span> = <span style="color:#aa5500">none</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">NotifyAccess</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">NotifyAccess</span> = <span style="color:#aa5500">exec</span> none
|
|
|
|
|
|
<span style="color:#898887">###### numa mask</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">NUMAMask</span> = <span style="color:#aa5500">all</span>
|
|
<span style="color:#0057ae">NUMAMask</span> = <span style="color:#b08000">1</span>,<span style="color:#b08000">2</span>,<span style="color:#b08000">3-8</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">NUMAMask</span> = invalid
|
|
<span style="color:#898887"># both all and cpu index list</span>
|
|
<span style="color:#0057ae">NUMAMask</span> = <span style="color:#aa5500">all</span>, 1,2,3-8
|
|
<span style="color:#0057ae">NUMAMask</span> = <span style="color:#b08000">1</span>,<span style="color:#b08000">2</span>,<span style="color:#b08000">3-8</span>, all
|
|
|
|
|
|
<span style="color:#898887">###### numa policy</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">NUMAPolicy</span> = <span style="color:#aa5500">bind</span>
|
|
<span style="color:#0057ae">NUMAPolicy</span> = <span style="color:#aa5500">default</span>
|
|
<span style="color:#0057ae">NUMAPolicy</span> = <span style="color:#aa5500">interleave</span>
|
|
<span style="color:#0057ae">NUMAPolicy</span> = <span style="color:#aa5500">local</span>
|
|
<span style="color:#0057ae">NUMAPolicy</span> = <span style="color:#aa5500">preferred</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">NUMAPolicy</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">NUMAPolicy</span> = <span style="color:#aa5500">interleave</span> local
|
|
|
|
|
|
<span style="color:#898887">###### on failure job mode</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">OnFailureJobMode</span> = <span style="color:#aa5500">fail</span>
|
|
<span style="color:#0057ae">OnFailureJobMode</span> = <span style="color:#aa5500">flush</span>
|
|
<span style="color:#0057ae">OnFailureJobMode</span> = <span style="color:#aa5500">ignore-dependencies</span>
|
|
<span style="color:#0057ae">OnFailureJobMode</span> = <span style="color:#aa5500">ignore-requirements</span>
|
|
<span style="color:#0057ae">OnFailureJobMode</span> = <span style="color:#aa5500">isolate</span>
|
|
<span style="color:#0057ae">OnFailureJobMode</span> = <span style="color:#aa5500">replace</span>
|
|
<span style="color:#0057ae">OnFailureJobMode</span> = <span style="color:#aa5500">replace-irreversibly</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">OnFailureJobMode</span> = invalid
|
|
<span style="color:#0057ae">OnFailureJobMode</span> = invalid <span style="color:#aa5500">fail</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">OnFailureJobMode</span> = <span style="color:#aa5500">replace</span> fail
|
|
|
|
|
|
<span style="color:#898887">###### oom behavior (out-of-memory killer behavior)</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">ManagedOOMSwap</span> = <span style="color:#aa5500">auto</span>
|
|
<span style="color:#0057ae">ManagedOOMSwap</span> = <span style="color:#aa5500">kill</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ManagedOOMSwap</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ManagedOOMSwap</span> = <span style="color:#aa5500">auto</span> kill
|
|
|
|
|
|
<span style="color:#898887">###### oom preference (out-of-memory killer preference)</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">ManagedOOMPreference</span> = <span style="color:#aa5500">avoid</span>
|
|
<span style="color:#0057ae">ManagedOOMPreference</span> = <span style="color:#aa5500">none</span>
|
|
<span style="color:#0057ae">ManagedOOMPreference</span> = <span style="color:#aa5500">omit</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ManagedOOMPreference</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ManagedOOMPreference</span> = <span style="color:#aa5500">avoid</span> none
|
|
|
|
|
|
<span style="color:#898887">###### oom policy (out-of-memory killer policy)</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">OOMPolicy</span> = <span style="color:#aa5500">continue</span>
|
|
<span style="color:#0057ae">OOMPolicy</span> = <span style="color:#aa5500">kill</span>
|
|
<span style="color:#0057ae">OOMPolicy</span> = <span style="color:#aa5500">stop</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">OOMPolicy</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">OOMPolicy</span> = <span style="color:#aa5500">kill</span> stop
|
|
|
|
|
|
<span style="color:#898887">###### oom score adjust (out-of-memory killer score adjustment)</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = <span style="color:#b08000">-1000</span>
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = <span style="color:#b08000">-123</span>
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = <span style="color:#b08000">0</span>
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = <span style="color:#b08000">321</span>
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = <span style="color:#b08000">+321</span>
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = <span style="color:#b08000">+1000</span>
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = <span style="color:#b08000">1000</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = invalid
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = <span style="color:#b08000">1</span>.2
|
|
<span style="color:#898887"># out of range</span>
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = <span style="color:#b08000">-100</span>1
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = <span style="color:#b08000">+100</span>1
|
|
<span style="color:#0057ae">OOMScoreAdjust</span> = <span style="color:#b08000">100</span>1
|
|
|
|
<span style="color:#898887">###### open file option</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">OpenFile</span> = /some/path/<span style="color:#ff5500">:</span><span style="font-style:italic">some-name</span><span style="color:#ff5500">:</span><span style="color:#aa5500">append</span>,<span style="color:#aa5500">graceful</span>,<span style="color:#aa5500">read-only</span>,<span style="color:#aa5500">truncate</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">OpenFile</span> = /some/path/<span style="color:#ff5500">:</span><span style="font-style:italic">some-name</span><span style="color:#ff5500">:</span>some,invalid,options
|
|
|
|
<span style="color:#898887">###### percent</span>
|
|
<span style="font-weight:bold">[Slice]</span>
|
|
<span style="color:#0057ae">CPUQuota</span> = <span style="color:#b08000">0.1</span><span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">CPUQuota</span> = <span style="color:#b08000">12</span> <span style="font-style:italic">%</span>
|
|
<span style="color:#0057ae">CPUQuota</span> = <span style="color:#b08000">123.4</span><span style="font-style:italic">%</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">CPUQuota</span> = 10
|
|
<span style="color:#0057ae">CPUQuota</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">CPUQuota</span> = <span style="color:#b08000">10</span><span style="font-style:italic">%</span> 20%
|
|
|
|
|
|
<span style="color:#898887">###### personality</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">arm</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">arm-be</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">arm64</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">arm64-be</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">ppc</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">ppc-le</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">ppc64</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">ppc64-le</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">s390</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">s390x</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">x86</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">x86-64</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">Personality</span> = invalid
|
|
<span style="color:#0057ae">Personality</span> = alpha
|
|
<span style="color:#0057ae">Personality</span> = m68k
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">Personality</span> = <span style="color:#aa5500">x86-64</span> s390x
|
|
|
|
|
|
<span style="color:#898887">###### private tmp</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">PrivateTmp</span> = <span style="color:#aa5500">disconnected</span>
|
|
<span style="color:#898887">## should accept any boolean value</span>
|
|
<span style="color:#0057ae">PrivateTmp</span> = <span style="color:#aa5500">on</span>
|
|
<span style="color:#0057ae">PrivateTmp</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">PrivateTmp</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">PrivateTmp</span> = <span style="color:#aa5500">1</span>
|
|
<span style="color:#0057ae">PrivateTmp</span> = <span style="color:#aa5500">off</span>
|
|
<span style="color:#0057ae">PrivateTmp</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">PrivateTmp</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">PrivateTmp</span> = <span style="color:#aa5500">0</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">PrivateTmp</span> = i<span style="color:#aa5500">n</span>valid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">PrivateTmp</span> = <span style="color:#aa5500">disconnected</span> true
|
|
|
|
|
|
<span style="color:#898887">###### private users</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = <span style="color:#aa5500">identity</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = <span style="color:#aa5500">self</span>
|
|
<span style="color:#898887">## should accept any boolean value</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = <span style="color:#aa5500">on</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = <span style="color:#aa5500">1</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = <span style="color:#aa5500">off</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = <span style="color:#aa5500">0</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = i<span style="color:#aa5500">n</span>valid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">PrivateUsers</span> = <span style="color:#aa5500">identity</span> self
|
|
|
|
|
|
<span style="color:#898887">###### proc subset</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">ProcSubset</span> = <span style="color:#aa5500">all</span>
|
|
<span style="color:#0057ae">ProcSubset</span> = <span style="color:#aa5500">pid</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ProcSubset</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ProcSubset</span> = <span style="color:#aa5500">all</span> pid
|
|
|
|
|
|
<span style="color:#898887">###### protect control groups</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">private</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">strict</span>
|
|
<span style="color:#898887">## should accept any boolean value</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">on</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">1</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">off</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">0</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">private</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ProtectControlGroups</span> = <span style="color:#aa5500">private</span> strict
|
|
|
|
|
|
<span style="color:#898887">###### protect home</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">ProtectHome</span> = <span style="color:#aa5500">read-only</span>
|
|
<span style="color:#0057ae">ProtectHome</span> = <span style="color:#aa5500">tmpfs</span>
|
|
<span style="color:#0057ae">ProtectHome</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">ProtectHome</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">ProtectHome</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ProtectHome</span> = i<span style="color:#aa5500">n</span>valid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ProtectHome</span> = <span style="color:#aa5500">tmpfs</span> true
|
|
|
|
|
|
<span style="color:#898887">###### protect system</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">ProtectSystem</span> = <span style="color:#aa5500">full</span>
|
|
<span style="color:#0057ae">ProtectSystem</span> = <span style="color:#aa5500">strict</span>
|
|
<span style="color:#0057ae">ProtectSystem</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">ProtectSystem</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">ProtectSystem</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">ProtectSystem</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ProtectSystem</span> = i<span style="color:#aa5500">n</span>valid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ProtectSystem</span> = <span style="color:#aa5500">full</span> true
|
|
|
|
|
|
<span style="color:#898887">###### restart</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">Restart</span> = <span style="color:#aa5500">always</span>
|
|
<span style="color:#0057ae">Restart</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#0057ae">Restart</span> = <span style="color:#aa5500">on-abnormal</span>
|
|
<span style="color:#0057ae">Restart</span> = <span style="color:#aa5500">on-abort</span>
|
|
<span style="color:#0057ae">Restart</span> = <span style="color:#aa5500">on-failure</span>
|
|
<span style="color:#0057ae">Restart</span> = <span style="color:#aa5500">on-success</span>
|
|
<span style="color:#0057ae">Restart</span> = <span style="color:#aa5500">on-watchdog</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">Restart</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">Restart</span> = <span style="color:#aa5500">no</span> on-abort
|
|
|
|
|
|
<span style="color:#898887">###### restart mode</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">RestartMode</span> = <span style="color:#aa5500">debug</span>
|
|
<span style="color:#0057ae">RestartMode</span> = <span style="color:#aa5500">direct</span>
|
|
<span style="color:#0057ae">RestartMode</span> = <span style="color:#aa5500">normal</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">RestartMode</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">RestartMode</span> = <span style="color:#aa5500">direct</span> normal
|
|
|
|
|
|
<span style="color:#898887">###### runtime directory preserve</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">RuntimeDirectoryPreserve</span> = <span style="color:#aa5500">restart</span>
|
|
<span style="color:#0057ae">RuntimeDirectoryPreserve</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#0057ae">RuntimeDirectoryPreserve</span> = <span style="color:#aa5500">false</span>
|
|
<span style="color:#0057ae">RuntimeDirectoryPreserve</span> = <span style="color:#aa5500">yes</span>
|
|
<span style="color:#0057ae">RuntimeDirectoryPreserve</span> = <span style="color:#aa5500">no</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">RuntimeDirectoryPreserve</span> = i<span style="color:#aa5500">n</span>valid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">RuntimeDirectoryPreserve</span> = <span style="color:#aa5500">restart</span> no
|
|
|
|
|
|
<span style="color:#898887">###### secure bits list</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">SecureBits</span> = <span style="color:#aa5500">keep-caps</span>
|
|
<span style="color:#0057ae">SecureBits</span> = <span style="color:#aa5500">keep-caps-locked</span>
|
|
<span style="color:#0057ae">SecureBits</span> = <span style="color:#aa5500">no-setuid-fixup</span>
|
|
<span style="color:#0057ae">SecureBits</span> = <span style="color:#aa5500">no-setuid-fixup-locked</span>
|
|
<span style="color:#0057ae">SecureBits</span> = <span style="color:#aa5500">noroot</span>
|
|
<span style="color:#0057ae">SecureBits</span> = <span style="color:#aa5500">noroot-locked</span>
|
|
<span style="color:#0057ae">SecureBits</span> = <span style="color:#aa5500">keep-caps</span> <span style="color:#aa5500">noroot-locked</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">no-setuid-fixup</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">SecureBits</span> = invalid
|
|
|
|
|
|
<span style="color:#898887">###### security</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = <span style="color:#aa5500">apparmor</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = <span style="color:#aa5500">audit</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = <span style="color:#aa5500">ima</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = <span style="color:#aa5500">measured-uki</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = <span style="color:#aa5500">selinux</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = <span style="color:#aa5500">smack</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = <span style="color:#aa5500">tomoyo</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = <span style="color:#aa5500">tpm2</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = <span style="color:#aa5500">uefi-secureboot</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = invalid <span style="color:#aa5500">selinux</span>
|
|
<span style="color:#0057ae">ConditionSecurity</span> = <span style="color:#aa5500">apparmor</span> selinux
|
|
|
|
|
|
<span style="color:#898887">###### service type</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">dbus</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">exec</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">forking</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">idle</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">notify</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">oneshot</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">simple</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">Type</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">Type</span> = <span style="color:#aa5500">exec</span> forking
|
|
|
|
|
|
<span style="color:#898887">###### signal</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGABRT</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGALRM</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGBUS</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGCHLD</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGCLD</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGCONT</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGEMT</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGFPE</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGHUP</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGILL</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGINFO</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGINT</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGIO</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGIOT</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGKILL</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGLOST</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGPIPE</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGPOLL</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGPROF</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGPWR</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGQUIT</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGSEGV</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGSTKFLT</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGSTOP</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGSYS</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGTERM</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGTRAP</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGTSTP</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGTTIN</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGTTOU</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGUNUSED</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGURG</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGUSR1</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGUSR2</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGVTALRM</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGWINCH</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGXCPU</span>
|
|
<span style="color:#0057ae">KillSignal</span> = <span style="color:#aa5500">SIGXFSZ</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">KillSignal</span> = SIG_INVALID
|
|
|
|
|
|
<span style="color:#898887">###### socket bind rule</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">SocketBindAllow</span> = <span style="color:#aa5500">any</span>
|
|
<span style="color:#0057ae">SocketBindAllow</span> = <span style="color:#aa5500">ipv4</span>:
|
|
<span style="color:#0057ae">SocketBindAllow</span> = <span style="color:#aa5500">ipv4</span>:<span style="color:#aa5500">tcp</span>:
|
|
<span style="color:#0057ae">SocketBindAllow</span> = <span style="color:#aa5500">ipv4</span>:<span style="color:#aa5500">tcp</span>:<span style="color:#b08000">12345</span>
|
|
<span style="color:#0057ae">SocketBindAllow</span> = <span style="color:#aa5500">ipv4</span>:<span style="color:#aa5500">tcp</span>:<span style="color:#b08000">1</span>-<span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">SocketBindAllow</span> = <span style="color:#aa5500">ipv6</span>:<span style="color:#aa5500">udp</span>:<span style="color:#b08000">1</span>-<span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">SocketBindAllow</span> = <span style="color:#aa5500">ipv6</span>: <span style="color:#aa5500">udp</span>: <span style="color:#b08000">1</span> - <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">SocketBindAllow</span> = <span style="color:#aa5500">tcp</span>:
|
|
<span style="color:#0057ae">SocketBindAllow</span> = <span style="color:#b08000">12345</span>
|
|
<span style="color:#0057ae">SocketBindAllow</span> = <span style="color:#b08000">123</span>-<span style="color:#b08000">456</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">SocketBindAllow</span> = ipv4 :
|
|
<span style="color:#0057ae">SocketBindAllow</span> = ipv5:<span style="color:#aa5500">tcp</span>:
|
|
<span style="color:#0057ae">SocketBindAllow</span> = ipv4:udcp:
|
|
<span style="color:#0057ae">SocketBindAllow</span> = tcp:ipv<span style="color:#b08000">4</span>
|
|
<span style="color:#0057ae">SocketBindAllow</span> = <span style="color:#aa5500">ipv4</span>:<span style="color:#aa5500">tcp</span>: <span style="color:#b08000">12345</span>
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">SocketBindAllow</span> = <span style="color:#aa5500">any</span> ipv4:
|
|
|
|
|
|
<span style="color:#898887">###### socket protocol</span>
|
|
<span style="font-weight:bold">[Socket]</span>
|
|
<span style="color:#0057ae">SocketProtocol</span> = <span style="color:#aa5500">sctp</span>
|
|
<span style="color:#0057ae">SocketProtocol</span> = <span style="color:#aa5500">udplite</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">SocketProtocol</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">SocketProtocol</span> = <span style="color:#aa5500">sctp</span> udplite
|
|
|
|
|
|
<span style="color:#898887">###### standard input</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">StandardInput</span> = <span style="color:#aa5500">data</span>
|
|
<span style="color:#0057ae">StandardInput</span> = <span style="color:#aa5500">fd</span>
|
|
<span style="color:#0057ae">StandardInput</span> = <span style="color:#aa5500">fd:</span>some_name
|
|
<span style="color:#0057ae">StandardInput</span> = <span style="color:#aa5500">file:</span>/some/absolute/path
|
|
<span style="color:#0057ae">StandardInput</span> = <span style="color:#aa5500">null</span>
|
|
<span style="color:#0057ae">StandardInput</span> = <span style="color:#aa5500">socket</span>
|
|
<span style="color:#0057ae">StandardInput</span> = <span style="color:#aa5500">tty</span>
|
|
<span style="color:#0057ae">StandardInput</span> = <span style="color:#aa5500">tty-fail</span>
|
|
<span style="color:#0057ae">StandardInput</span> = <span style="color:#aa5500">tty-force</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">StandardInput</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">StandardInput</span> = <span style="color:#aa5500">null</span> tty
|
|
<span style="color:#0057ae">StandardInput</span> = <span style="color:#aa5500">file:</span>/some/absolute/path socket
|
|
<span style="color:#898887"># no absolute path immediately after `file:`</span>
|
|
<span style="color:#0057ae">StandardInput</span> = file:
|
|
<span style="color:#0057ae">StandardInput</span> = file:some//path
|
|
<span style="color:#0057ae">StandardInput</span> = file: /some/absolute/path
|
|
|
|
|
|
<span style="color:#898887">###### standard output</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#898887"># </span><span style="color:#81ca2d;background-color:#f7e6e6;font-weight:bold">NOTE</span><span style="color:#898887">: Option StandardError accepts the same values.</span>
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">append:</span>/some/absolute/path
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">fd</span>
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">fd:</span>some_name
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">file:</span>/some/absolute/path
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">inherit</span>
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">journal</span>
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">journal+console</span>
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">kmsg</span>
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">kmsg+console</span>
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">null</span>
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">socket</span>
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">truncate:</span>/some/absolute/path
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">tty</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">StandardOutput</span> = invalid
|
|
<span style="color:#0057ae">StandardOutput</span> = syslog
|
|
<span style="color:#898887"># no absolute path immediately after append:, file:</span>
|
|
<span style="color:#0057ae">StandardOutput</span> = append:
|
|
<span style="color:#0057ae">StandardOutput</span> = append:some/relative/path
|
|
<span style="color:#0057ae">StandardOutput</span> = append: /some/relative/path
|
|
<span style="color:#0057ae">StandardOutput</span> = file:
|
|
<span style="color:#0057ae">StandardOutput</span> = file:some/relative/path
|
|
<span style="color:#0057ae">StandardOutput</span> = file: /some/relative/path
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">null</span> tty
|
|
<span style="color:#0057ae">StandardOutput</span> = <span style="color:#aa5500">file:</span>/some/absolute/path socket
|
|
|
|
|
|
<span style="color:#898887">###### system call architecture</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">SystemCallArchitectures</span> = <span style="color:#aa5500">mips64-le-n32</span>
|
|
<span style="color:#0057ae">SystemCallArchitectures</span> = <span style="color:#aa5500">mips64-n32</span>
|
|
<span style="color:#0057ae">SystemCallArchitectures</span> = <span style="color:#aa5500">native</span>
|
|
<span style="color:#0057ae">SystemCallArchitectures</span> = <span style="color:#aa5500">x32</span>
|
|
<span style="color:#898887"># all values from "architecture" are also valid</span>
|
|
<span style="color:#0057ae">SystemCallArchitectures</span> = <span style="color:#aa5500">alpha</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#aa5500">mips</span> <span style="color:#aa5500">sparc</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">SystemCallArchitectures</span> = invalid
|
|
|
|
|
|
<span style="color:#898887">###### system call errno</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">kill</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">log</span>
|
|
<span style="color:#898887"># from man errno(3)</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EACCES</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EADDRINUSE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EADDRNOTAVAIL</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EAFNOSUPPORT</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EAGAIN</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EALREADY</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EBADE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EBADF</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EBADFD</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EBADMSG</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EBADR</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EBADRQC</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EBADSLT</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EBUSY</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ECANCELED</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ECHILD</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ECHRNG</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ECOMM</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ECONNABORTED</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ECONNREFUSED</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ECONNRESET</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EDEADLK</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EDEADLOCK</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EDESTADDRREQ</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EDOM</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EDQUOT</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EEXIST</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EFAULT</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EFBIG</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EHOSTDOWN</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EHOSTUNREACH</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EHWPOISON</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EIDRM</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EILSEQ</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EINPROGRESS</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EINTR</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EINVAL</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EIO</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EISCONN</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EISDIR</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EISNAM</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EKEYEXPIRED</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EKEYREJECTED</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EKEYREVOKED</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EL2HLT</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EL2NSYNC</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EL3HLT</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EL3RST</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ELIBACC</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ELIBBAD</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ELIBEXEC</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ELIBMAX</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ELIBSCN</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ELNRNG</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ELOOP</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EMEDIUMTYPE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EMFILE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EMLINK</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EMSGSIZE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EMULTIHOP</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENAMETOOLONG</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENETDOWN</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENETRESET</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENETUNREACH</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENFILE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOANO</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOBUFS</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENODATA</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENODEV</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOENT</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOEXEC</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOKEY</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOLCK</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOLINK</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOMEDIUM</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOMEM</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOMSG</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENONET</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOPKG</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOPROTOOPT</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOSPC</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOSR</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOSTR</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOSYS</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOTBLK</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOTCONN</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOTDIR</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOTEMPTY</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOTRECOVERABLE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOTSOCK</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOTSUP</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOTTY</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENOTUNIQ</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ENXIO</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EOPNOTSUPP</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EOVERFLOW</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EOWNERDEAD</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EPERM</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EPFNOSUPPORT</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EPIPE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EPROTO</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EPROTONOSUPPORT</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EPROTOTYPE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ERANGE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EREMCHG</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EREMOTE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EREMOTEIO</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ERESTART</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ERFKILL</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EROFS</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ESHUTDOWN</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ESOCKTNOSUPPORT</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ESPIPE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ESRCH</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ESTALE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ESTRPIPE</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ETIME</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ETIMEDOUT</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ETOOMANYREFS</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ETXTBSY</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EUCLEAN</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EUNATCH</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EUSERS</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EWOULDBLOCK</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EXDEV</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">EXFULL</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">1</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">1234</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">2</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">23</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">234</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">2345</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">3</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">34</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">345</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">3456</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">3999</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">4000</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">4009</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">4019</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">4089</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">4095</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = invalid
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = -<span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = 0.<span style="color:#b08000">12</span>
|
|
<span style="color:#898887"># out of range</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = 0
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">409</span>6
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">500</span>0
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#ff5500">ESPIPE</span> EUCLEAN
|
|
<span style="color:#0057ae">SystemCallErrorNumber</span> = <span style="color:#b08000">123</span> EUCLEAN
|
|
|
|
|
|
<span style="color:#898887">###### time span</span>
|
|
<span style="font-weight:bold">[Timer]</span>
|
|
<span style="color:#898887"># without unit</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">15</span>
|
|
<span style="color:#898887"># micro second</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">123 </span><span style="font-style:italic">usec</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">123</span><span style="font-style:italic">us</span>
|
|
<span style="color:#898887"># using UTF-8 "Micro Sign" U+00B5 &micro; &#181; &#xB5;</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">123 </span><span style="font-style:italic">µs</span>
|
|
<span style="color:#898887"># using UTF-8 "Greek Small Letter Mu" U+03BC &mu; &#956; &#x3BC;</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">123 </span><span style="font-style:italic">μs</span>
|
|
<span style="color:#898887"># milli second</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">123 </span><span style="font-style:italic">msec</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">123</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#898887"># second</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">74 </span><span style="font-style:italic">s</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">2</span><span style="font-style:italic">sec</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">12 </span><span style="font-style:italic">second</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">1 </span><span style="font-style:italic">seconds</span>
|
|
<span style="color:#898887"># minute</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">342 </span><span style="font-style:italic">m</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">2</span><span style="font-style:italic">min</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">7 </span><span style="font-style:italic">minute</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">1 </span><span style="font-style:italic">minutes</span>
|
|
<span style="color:#898887"># hour</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">2 </span><span style="font-style:italic">h</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">48 </span><span style="font-style:italic">hr</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">2</span><span style="font-style:italic">hour</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">2</span><span style="font-style:italic">hours</span>
|
|
<span style="color:#898887"># day</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">2 </span><span style="font-style:italic">d</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">1 </span><span style="font-style:italic">day</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">7 </span><span style="font-style:italic">days</span>
|
|
<span style="color:#898887"># week</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">2 </span><span style="font-style:italic">w</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">123 </span><span style="font-style:italic">week</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">0 </span><span style="font-style:italic">weeks</span>
|
|
<span style="color:#898887"># month</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">12 </span><span style="font-style:italic">M</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">7 </span><span style="font-style:italic">month</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">1 </span><span style="font-style:italic">months</span>
|
|
<span style="color:#898887"># year</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">y</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">123</span><span style="font-style:italic">year</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">12 </span><span style="font-style:italic">years</span>
|
|
<span style="color:#898887"># combined</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">55</span><span style="font-style:italic">s</span><span style="color:#b08000">500</span><span style="font-style:italic">ms</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">300</span><span style="font-style:italic">ms</span><span style="color:#b08000">20</span><span style="font-style:italic">s</span> <span style="color:#b08000">5</span><span style="font-style:italic">day</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">123 5 </span><span style="font-style:italic">days</span> <span style="color:#b08000">1</span><span style="font-style:italic">m</span> <span style="color:#b08000">12 1</span><span style="font-style:italic">sec</span> <span style="color:#b08000">123 </span><span style="font-weight:bold">\</span>
|
|
<span style="color:#b08000">23 </span><span style="font-style:italic">msec</span> <span style="color:#b08000">13 1</span><span style="font-style:italic">us</span>
|
|
<span style="color:#898887"># multiple hours</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">7</span><span style="font-style:italic">hr</span> <span style="color:#b08000">2</span><span style="font-style:italic">hr</span> <span style="font-weight:bold">\</span>
|
|
<span style="color:#b08000">1</span><span style="font-style:italic">d</span> <span style="color:#b08000">2</span><span style="font-style:italic">w</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#898887"># mi is invalid</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">1</span><span style="font-style:italic">m</span>i
|
|
<span style="color:#898887"># hs is invalid</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">2</span><span style="font-style:italic">h</span>s
|
|
<span style="color:#898887"># ds is invalid</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">7 </span><span style="font-style:italic">d</span>s <span style="color:#b08000">1</span><span style="font-style:italic">y</span>
|
|
<span style="color:#898887"># unit without amount</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">12 </span><span style="font-style:italic">min</span> sec
|
|
<span style="color:#0057ae">OnBootSec</span> = min <span style="color:#b08000">1 </span><span style="font-style:italic">sec</span>
|
|
<span style="color:#898887"># invalid unit</span>
|
|
<span style="color:#0057ae">OnBootSec</span> = <span style="color:#b08000">12</span>foo <span style="color:#b08000">1 </span>bar
|
|
|
|
|
|
<span style="color:#898887">###### timeout</span>
|
|
<span style="color:#898887"># all values from time span are valid</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">JobTimeoutSec</span> = <span style="color:#b08000">0</span>
|
|
<span style="color:#0057ae">JobTimeoutSec</span> = <span style="color:#b08000">12345</span>
|
|
<span style="color:#0057ae">JobTimeoutSec</span> = <span style="color:#b08000">123 5 </span><span style="font-style:italic">days</span> <span style="color:#b08000">1</span><span style="font-style:italic">m</span> <span style="color:#b08000">12 1</span><span style="font-style:italic">sec</span> <span style="color:#b08000">123</span><span style="font-weight:bold">\</span>
|
|
<span style="color:#b08000">23 </span><span style="font-style:italic">msec</span> <span style="color:#b08000">13 1</span><span style="font-style:italic">us</span>
|
|
<span style="color:#0057ae">JobTimeoutSec</span> = <span style="color:#aa5500">infinity</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">JobTimeoutSec</span> = invalid
|
|
<span style="color:#0057ae">JobTimeoutSec</span> = inf
|
|
<span style="color:#0057ae">JobTimeoutSec</span> = -<span style="color:#b08000">10</span>
|
|
<span style="color:#0057ae">JobTimeoutSec</span> = <span style="color:#b08000">0.235</span>
|
|
|
|
|
|
<span style="color:#898887">###### timestamping</span>
|
|
<span style="font-weight:bold">[Socket]</span>
|
|
<span style="color:#0057ae">Timestamping</span> = <span style="color:#aa5500">ns</span>
|
|
<span style="color:#0057ae">Timestamping</span> = <span style="color:#aa5500">nsec</span>
|
|
<span style="color:#0057ae">Timestamping</span> = <span style="color:#aa5500">off</span>
|
|
<span style="color:#0057ae">Timestamping</span> = <span style="color:#aa5500">us</span>
|
|
<span style="color:#0057ae">Timestamping</span> = <span style="color:#aa5500">usec</span>
|
|
<span style="color:#898887"># using UTF-8 "Micro Sign" U+00B5 &micro; &#181; &#xB5;</span>
|
|
<span style="color:#0057ae">Timestamping</span> = <span style="color:#aa5500">µs</span>
|
|
<span style="color:#898887"># using UTF-8 "Greek Small Letter Mu" U+03BC &mu; &#956; &#x3BC;</span>
|
|
<span style="color:#0057ae">Timestamping</span> = <span style="color:#aa5500">μs</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">Timestamping</span> = nanosec
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">Timestamping</span> = <span style="color:#aa5500">nsec</span> off
|
|
|
|
|
|
<span style="color:#898887">###### unit</span>
|
|
<span style="font-weight:bold">[Path]</span>
|
|
<span style="color:#898887">#</span><span style="color:#81ca2d;background-color:#f7e6e6;font-weight:bold">###</span><span style="color:#898887"> names</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some-name</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some.name</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some:name</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@instance</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@other-instance</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@other.instance</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@other:instance</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@other@instance</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@other</span><span style="color:#3daee9">%i</span><span style="color:#006e28;font-weight:bold">instance</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">systemd-fsck</span><span style="color:#006e28;font-weight:bold">@dev-nvme0n1p2</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@</span><span style="color:#3daee9">%i</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">dev-disk-by</span><span style="color:#3daee9">\x2d</span><span style="color:#006e28">uuid-5af23b</span><span style="color:#3daee9">\x2d</span><span style="color:#006e28">fde6</span><span style="color:#3daee9">\x2d</span><span style="color:#006e28">424e</span><span style="color:#3daee9">\x2d</span><span style="color:#006e28">a1bb</span><span style="color:#3daee9">\x2d</span><span style="color:#006e28">e88bc</span><span style="color:#006e28;font-style:italic">.swap</span>
|
|
<span style="color:#898887">## invalid names</span>
|
|
<span style="color:#898887"># \x2x is an invalid escape as 2x is no hex number</span>
|
|
<span style="color:#0057ae">Unit</span> = dev-disk-by\<span style="color:#006e28">x2xuuid-5af23b</span><span style="color:#3daee9">\x2d</span><span style="color:#006e28">fde6</span><span style="color:#3daee9">\x2d</span><span style="color:#006e28">424e</span><span style="color:#3daee9">\x2d</span><span style="color:#006e28">a1bb</span><span style="color:#3daee9">\x2d</span><span style="color:#006e28">e88bc</span><span style="color:#006e28;font-style:italic">.swap</span>
|
|
<span style="color:#898887">#</span><span style="color:#81ca2d;background-color:#f7e6e6;font-weight:bold">###</span><span style="color:#898887"> extensions</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.automount</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.device</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.mount</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.socket</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.slice</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.swap</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.target</span>
|
|
<span style="color:#898887">## invalid extension</span>
|
|
<span style="color:#0057ae">Unit</span> = some.invalid
|
|
<span style="color:#898887"># incomplete unit, missing extension</span>
|
|
<span style="color:#0057ae">Unit</span> = some.
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span>some-other.service
|
|
<span style="color:#0057ae">Unit</span> = <span style="color:#006e28">some.service</span><span style="color:#006e28;font-style:italic">.service </span>\
|
|
some.other.service.service
|
|
|
|
|
|
<span style="color:#898887">###### unit list</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#898887">#</span><span style="color:#81ca2d;background-color:#f7e6e6;font-weight:bold">###</span><span style="color:#898887"> names</span>
|
|
<span style="color:#0057ae">After</span> = <span style="color:#006e28">some.service</span><span style="color:#006e28;font-style:italic">.service </span><span style="font-weight:bold">\</span>
|
|
<span style="color:#006e28">some.other.service</span><span style="color:#006e28;font-style:italic">.service </span><span style="font-weight:bold">\</span>
|
|
<span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@instance</span><span style="color:#006e28;font-style:italic">.service </span><span style="font-weight:bold">\</span>
|
|
<span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@</span><span style="color:#3daee9">%i</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#898887"># incomplete unit, missing extension</span>
|
|
<span style="color:#0057ae">After</span> = some. <span style="font-weight:bold">\</span>
|
|
<span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span><span style="font-weight:bold">\</span>
|
|
<span style="color:#006e28">some-other</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
|
|
|
|
<span style="color:#898887">###### unit list socket</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">Sockets</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.socket </span><span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@instance</span><span style="color:#006e28;font-style:italic">.socket</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">Sockets</span> = some.service
|
|
<span style="color:#0057ae">Sockets</span> = some.service <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.socket</span>
|
|
|
|
|
|
<span style="color:#898887">###### unit service</span>
|
|
<span style="font-weight:bold">[Socket]</span>
|
|
<span style="color:#0057ae">Service</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#0057ae">Service</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@instance</span><span style="color:#006e28;font-style:italic">.service</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">Service</span> = some.invalid
|
|
<span style="color:#898887"># other unit types</span>
|
|
<span style="color:#0057ae">Service</span> = some.socket
|
|
<span style="color:#0057ae">Service</span> = some.target
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">Service</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.service </span>other.service
|
|
|
|
|
|
<span style="color:#898887">###### unit slice</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">Slice</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.slice</span>
|
|
<span style="color:#0057ae">Slice</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-weight:bold">@instance</span><span style="color:#006e28;font-style:italic">.slice</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#898887"># other unit types</span>
|
|
<span style="color:#0057ae">Slice</span> = some.service
|
|
<span style="color:#0057ae">Slice</span> = some.target
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">Slice</span> = <span style="color:#006e28">some</span><span style="color:#006e28;font-style:italic">.slice </span>other.slice
|
|
|
|
|
|
<span style="color:#898887">###### utmp mode</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">UtmpMode</span> = <span style="color:#aa5500">init</span>
|
|
<span style="color:#0057ae">UtmpMode</span> = <span style="color:#aa5500">login</span>
|
|
<span style="color:#0057ae">UtmpMode</span> = <span style="color:#aa5500">user</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">UtmpMode</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">UtmpMode</span> = <span style="color:#aa5500">login</span> user
|
|
|
|
|
|
<span style="color:#898887">###### variable assignments</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">Environment</span> = <span style="color:#0057ae">DISPLAY</span>=:<span style="color:#3daee9">%i</span>
|
|
<span style="color:#0057ae">Environment</span> = <span style="color:#0057ae">XAUTHORITY</span>=<span style="color:#3daee9">%t</span>/Xauthority.<span style="color:#3daee9">%i</span> <span style="color:#0057ae">var1</span>=15 <span style="font-weight:bold">\</span>
|
|
"<span style="color:#0057ae">var2</span>=value with spaces" <span style="color:#0057ae">EMPTY</span>=
|
|
<span style="color:#0057ae">Environment</span> = <span style="color:#0057ae">XDG_VTNR</span>=vt<span style="color:#3daee9">%i</span>
|
|
<span style="color:#0057ae">LogExtraFields</span> = <span style="color:#0057ae">NAME</span>=VALUE
|
|
|
|
|
|
<span style="color:#898887">###### virtualization</span>
|
|
<span style="font-weight:bold">[Unit]</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">acrn</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">bhyve</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">bochs</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">docker</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">google</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">kvm</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">lxc</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">lxc-libvirt</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">microsoft</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">openvz</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">oracle</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">parallels</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">qemu</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">qnx</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">rkt</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">sre</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">systemd-nspawn</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">uml</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">vmware</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">wsl</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">xen</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">zvm</span>
|
|
<span style="color:#898887"># using boolean</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">true</span>
|
|
<span style="color:#898887"># using generic type</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">container</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">vm</span>
|
|
<span style="color:#898887"># private users</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">private-users</span>
|
|
<span style="color:#898887"># negated</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#ff5500">!</span><span style="color:#aa5500">vmware</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = i<span style="color:#aa5500">n</span>valid
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = i<span style="color:#aa5500">n</span>valid vmware
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">ConditionVirtualization</span> = <span style="color:#aa5500">xen</span> vmware
|
|
|
|
|
|
<span style="color:#898887">###### weight</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#898887"># integer 1..10000</span>
|
|
<span style="color:#0057ae">IOWeight</span> = <span style="color:#b08000">1</span>
|
|
<span style="color:#0057ae">IOWeight</span> = <span style="color:#b08000">12</span>
|
|
<span style="color:#0057ae">IOWeight</span> = <span style="color:#b08000">123</span>
|
|
<span style="color:#0057ae">IOWeight</span> = <span style="color:#b08000">1234</span>
|
|
<span style="color:#0057ae">IOWeight</span> = <span style="color:#b08000">1234</span>
|
|
<span style="color:#0057ae">IOWeight</span> = <span style="color:#b08000">10000</span>
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#0057ae">IOWeight</span> = -<span style="color:#b08000">1</span>
|
|
<span style="color:#0057ae">IOWeight</span> = 0
|
|
<span style="color:#0057ae">IOWeight</span> = 1000<span style="color:#b08000">1</span>
|
|
<span style="color:#0057ae">IOWeight</span> = 1<span style="color:#b08000">2345</span>
|
|
<span style="color:#0057ae">IOWeight</span> = 12.<span style="color:#b08000">3</span>
|
|
<span style="color:#0057ae">IOWeight</span> = invalid
|
|
<span style="color:#898887"># multiple values</span>
|
|
<span style="color:#0057ae">IOWeight</span> = 1 <span style="color:#b08000">10000</span>
|
|
|
|
|
|
<span style="color:#898887">###### working directory</span>
|
|
<span style="font-weight:bold">[Service]</span>
|
|
<span style="color:#0057ae">WorkingDirectory</span> = <span style="color:#3daee9">~</span>
|
|
<span style="color:#0057ae">WorkingDirectory</span> = <span style="color:#ff5500">-</span> <span style="color:#3daee9">~</span>
|
|
<span style="color:#0057ae">WorkingDirectory</span> = <span style="color:#3daee9">%h</span>
|
|
<span style="color:#0057ae">WorkingDirectory</span> = /some/absolute/path
|
|
<span style="color:#0057ae">WorkingDirectory</span> = <span style="color:#ff5500">-</span>/some/absolute-path
|
|
<span style="color:#0057ae">WorkingDirectory</span> = <span style="color:#ff5500">-</span> /some/absolute/path
|
|
<span style="color:#898887">## invalid values</span>
|
|
<span style="color:#898887"># using `-` without a path</span>
|
|
<span style="color:#0057ae">WorkingDirectory</span> = <span style="color:#ff5500">-</span>
|
|
<span style="color:#898887"># multiple paths</span>
|
|
<span style="color:#0057ae">WorkingDirectory</span> = <span style="color:#3daee9">~</span> /some/absolute/path
|
|
<span style="color:#0057ae">WorkingDirectory</span> = /some/absolute/path <span style="color:#3daee9">~</span>
|
|
<span style="color:#0057ae">WorkingDirectory</span> = /some/absolute/path /some/other/path
|
|
<span style="color:#0057ae">WorkingDirectory</span> = <span style="color:#ff5500">-</span> - /some/absolute/path
|
|
</pre></body></html>
|