Files
RedBear-OS/local/recipes/kde/kf6-syntaxhighlighting/source/autotests/html/systemd-unit.service.dark.html
T

3000 lines
273 KiB
HTML

<!DOCTYPE html>
<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
<title>systemd-unit.service</title>
<meta name="generator" content="KF5::SyntaxHighlighting - Definition (systemd unit) - Theme (Breeze Dark)"/>
</head><body style="background-color:#232629;color:#cfcfc2"><pre>
<span style="color:#7a7c7d"># </span><span style="color:#ca9219;background-color:#451e1a;font-weight:bold">WARNING</span><span style="color:#7a7c7d"> : This file is NOT a valid systemd service.</span>
<span style="color:#7a7c7d"># It was created to demonstrate/test KDE syntax highlighting.</span>
<span style="color:#7a7c7d"># It includes invalid sections, option names and option values.</span>
<span style="color:#7a7c7d">; </span><span style="color:#81ca2d;background-color:#4d1f24;font-weight:bold">NOTE</span><span style="color:#7a7c7d">: Alerts in comments are supported.</span>
<span style="font-weight:bold">[Automount]</span>
<span style="color:#2980b9">Where</span> = /the/mount/directory
<span style="color:#2980b9">ExtraOptions</span> = some,extra, mount , options, <span style="color:#3daee9">%I</span>
<span style="color:#2980b9">DirectoryMode</span> = <span style="color:#f67400">0755</span>
<span style="color:#2980b9">TimeoutIdleSec</span> = <span style="color:#f67400">5</span><span style="font-style:italic">min</span> <span style="color:#f67400">5</span><span style="font-style:italic">s</span>
<span style="font-weight:bold">[Install]</span>
<span style="color:#2980b9">Alias</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span>some.invalid <span style="color:#27ae60">some_</span><span style="color:#3daee9">%b</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">WantedBy</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.socket </span>some.invalid
<span style="color:#2980b9">RequiredBy</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.socket </span>some.invalid
<span style="color:#2980b9">UpheldBy</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.socket </span>some.invalid
<span style="color:#2980b9">Also</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.socket </span>some.invalid
<span style="color:#2980b9">DefaultInstance</span> = id
<span style="font-weight:bold">[Mount]</span>
<span style="color:#2980b9">What</span> = /dev/disk/by-uuid/444c-0d9d-411e-a973-015b31acaa
<span style="color:#7a7c7d"># </span><span style="color:#81ca2d;background-color:#4d1f24;font-weight:bold">NOTE</span><span style="color:#7a7c7d">: Since systemd version 256 fstab-style identifiers are supported too.</span>
<span style="color:#2980b9">What</span> = UUID=444c-0d9d-411e-a973-015b31acaa
<span style="color:#2980b9">Where</span> = /the/mount/directory
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">btrfs</span>
<span style="color:#2980b9">Options</span> = subvol=some_name,compress=lzo,noatime,noauto,nodev,nosuid
<span style="color:#2980b9">SloppyOptions</span> = <span style="color:#27aeae;font-weight:bold">on</span>
<span style="color:#2980b9">LazyUnmount</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">ReadWriteOnly</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">ForceUnmount</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">DirectoryMode</span> = <span style="color:#f67400">0700</span>
<span style="color:#2980b9">TimeoutSec</span> = <span style="color:#f67400">5 </span><span style="font-style:italic">m</span> <span style="color:#f67400">20 </span><span style="font-style:italic">s</span>
<span style="color:#7a7c7d"># see [Service] for options from systemd.exec and systemd.kill</span>
<span style="font-weight:bold">[Path]</span>
<span style="color:#2980b9">PathExists</span> = /some/absolute/path
<span style="color:#2980b9">PathExistsGlob</span> = /some/g<span style="color:#3daee9">[lo]</span>b<span style="color:#3daee9">*</span>
<span style="color:#2980b9">PathChanged</span> = /some/absolute/path
<span style="color:#2980b9">PathModified</span> = /some/absolute/path
<span style="color:#2980b9">DirectoryNotEmpty</span> = /some/absolute/path
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@instance</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">MakeDirectory</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">DirectoryMode</span> = <span style="color:#f67400">0700</span>
<span style="color:#2980b9">TriggerLimitIntervalSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">min</span> <span style="color:#f67400">10</span><span style="font-style:italic">sec</span>
<span style="color:#2980b9">TriggerLimitBurst</span> = <span style="color:#f67400">15</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#7a7c7d">## from systemd.service</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">exec</span>
<span style="color:#2980b9">RemainAfterExit</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">GuessMainPID</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">PIDFile</span> = some/path
<span style="color:#2980b9">BusName</span> = some.name
<span style="color:#2980b9">ExecStart</span> = /usr/bin/Xorg <span style="color:#27aeae">${DISPLAY}</span> <span style="color:#27aeae">${XDG_VTNR}</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
-logfile <span style="color:#3daee9">%t</span>/X.<span style="color:#3daee9">%i</span>.log <span style="color:#fdbc4b;font-weight:bold">\</span>
-nolisten tcp <span style="color:#fdbc4b;font-weight:bold">\</span>
-quiet
<span style="color:#2980b9">ExecStartPre</span> = <span style="color:#da4453">@</span>/bin/start/pre some args
<span style="color:#2980b9">ExecStartPost</span> = <span style="color:#da4453">-</span>cmd arg, <span style="color:#da4453">@</span>cmd2 name -o <span style="color:#3daee9">\x0A</span>
<span style="color:#2980b9">ExecCondition</span> = /bin/exec/condition
<span style="color:#2980b9">ExecReload</span> = /bin/exec/reload
<span style="color:#2980b9">ExecStop</span> = /bin/kill -SIGABRT <span style="color:#27aeae">$MAINPID</span>
<span style="color:#2980b9">ExecStopPost</span> = <span style="color:#da4453">-:!!</span>/bin/stop/post
<span style="color:#2980b9">RestartSec</span> = <span style="color:#f67400">15</span>
<span style="color:#2980b9">RestartSteps</span> = <span style="color:#f67400">2</span>
<span style="color:#2980b9">RestartMaxDelaySec</span> = <span style="color:#f67400">150</span><span style="font-style:italic">ms</span>
<span style="color:#2980b9">TimeoutStartSec</span> = <span style="color:#f67400">5</span><span style="font-style:italic">s</span> <span style="color:#f67400">100</span><span style="font-style:italic">ms</span>
<span style="color:#2980b9">TimeoutStopSec</span> = <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#2980b9">TimeoutAbortSec</span> = <span style="color:#f67400">15</span>
<span style="color:#2980b9">TimeoutSec</span> = <span style="color:#f67400">10</span>
<span style="color:#2980b9">TimeoutStartFailureMode</span> = <span style="color:#27aeae;font-weight:bold">abort</span>
<span style="color:#2980b9">TimeoutStopFailureMode</span> = <span style="color:#27aeae;font-weight:bold">kill</span>
<span style="color:#2980b9">RuntimeMaxSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">min</span> <span style="color:#f67400">20 </span><span style="font-style:italic">seconds</span>
<span style="color:#2980b9">RuntimeRandomizedExtraSec</span> = <span style="color:#f67400">12</span>
<span style="color:#2980b9">WatchdogSec</span> = <span style="color:#f67400">90</span>
<span style="color:#2980b9">Restart</span> = <span style="color:#27aeae;font-weight:bold">on-watchdog</span>
<span style="color:#2980b9">RestartMode</span> = <span style="color:#27aeae;font-weight:bold">direct</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">PROTOCOL</span> <span style="color:#27aeae;font-weight:bold">RUNTIME_DIRECTORY</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">SECCOMP</span> <span style="color:#f67400">15</span> <span style="color:#f67400">23</span> <span style="color:#27aeae;font-weight:bold">SIGUSR1</span> <span style="color:#27aeae;font-weight:bold">SIGXCPU</span>
<span style="color:#2980b9">RestartPreventExitStatus</span> = <span style="color:#f67400">15</span> <span style="color:#f67400">23</span> <span style="color:#27aeae;font-weight:bold">SIGUSR1</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">SIGXCPU</span>
<span style="color:#2980b9">RestartForceExitStatus</span> = <span style="color:#27aeae;font-weight:bold">SIGQUIT</span> <span style="color:#27aeae;font-weight:bold">SIGSTOP</span> <span style="color:#f67400">99</span>
<span style="color:#2980b9">RootDirectoryStartOnly</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">NonBlocking</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">NotifyAccess</span> = <span style="color:#27aeae;font-weight:bold">exec</span>
<span style="color:#2980b9">Sockets</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.socket </span><span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27ae60">some-other</span><span style="color:#27ae60;font-style:italic">.socket</span>
<span style="color:#2980b9">FileDescriptorStoreMax</span> = <span style="color:#f67400">5</span>
<span style="color:#2980b9">FileDescriptorStorePreserve</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">USBFunctionDescriptors</span> = /some/absolute/path
<span style="color:#2980b9">USBFunctionStrings</span> = /some/absolute/path
<span style="color:#2980b9">OOMPolicy</span> = <span style="color:#27aeae;font-weight:bold">stop</span>
<span style="color:#2980b9">OpenFile</span> = /some/path<span style="color:#da4453">:</span><span style="font-style:italic">fd-name</span><span style="color:#da4453">:</span><span style="color:#27aeae;font-weight:bold">graceful</span>,<span style="color:#27aeae;font-weight:bold">read-only</span>
<span style="color:#2980b9">ReloadSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGUSR1</span>
<span style="color:#7a7c7d">## from systemd.exec</span>
<span style="color:#2980b9">ExecPaths</span> = some/path some/other/path
<span style="color:#2980b9">ExtensionImages</span> = /source/path
<span style="color:#2980b9">ExtensionDirectories</span> = /source/path
<span style="color:#2980b9">IPCNamespacePath</span> = /some/absolute/path
<span style="color:#2980b9">MemoryKSM</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">NoExecPaths</span> = some/path some/other/path
<span style="color:#2980b9">PrivateIPC</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#7a7c7d">## from systemd.exec Paths</span>
<span style="color:#2980b9">ExecSearchPath</span> = /some/path:/some/other/path
<span style="color:#2980b9">WorkingDirectory</span> = <span style="color:#3daee9">~</span>
<span style="color:#2980b9">RootDirectory</span> = /some/path
<span style="color:#2980b9">RootImage</span> = /some/path
<span style="color:#2980b9">RootImageOptions</span> = partition_name,noauto
<span style="color:#2980b9">RootEphemeral</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">RootHash</span> = /some/path
<span style="color:#2980b9">RootHash</span> = <span style="color:#f67400">0xABCDEF</span>
<span style="color:#2980b9">RootHashSignature</span> =
<span style="color:#2980b9">RootVerity</span> = /some/path
<span style="color:#2980b9">MountAPIVFS</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">BindLogSockets</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">ProcSubset</span> = <span style="color:#27aeae;font-weight:bold">pid</span>
<span style="color:#2980b9">BindPaths</span> = /source/path,/destination/path,<span style="color:#27aeae;font-weight:bold">rbind</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
/source/path2,/destination/path2,<span style="color:#27aeae;font-weight:bold">norbind</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
/source/path3
<span style="color:#2980b9">BindReadOnlyPaths</span> = /source/path,/destination/path,<span style="color:#27aeae;font-weight:bold">rbind</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
/source/path2,/destination/path2,<span style="color:#27aeae;font-weight:bold">norbind</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
/source/path3
<span style="color:#2980b9">MountImages</span> = /source/path,dest
<span style="color:#7a7c7d">## from systemd.exec Credentials</span>
<span style="color:#2980b9">User</span> = <span style="color:#f67400">1000</span>
<span style="color:#2980b9">Group</span> = group-name
<span style="color:#2980b9">DynamicUser</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">SupplementaryGroups</span> = group1 group-two <span style="color:#f67400">100</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
one-more-group
<span style="color:#2980b9">SetLoginEnvironment</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">PAMName</span> =
<span style="color:#2980b9">LoadCredential</span> = some_id:/path/to/credential/data
<span style="color:#2980b9">LoadCredentialEncrypted</span> = some_id:/path/to/credential/data
<span style="color:#7a7c7d"># accepts an optional single trailing asterisk</span>
<span style="color:#2980b9">ImportCredential</span> = some*
<span style="color:#2980b9">SetCredential</span> = some_id:some_credential
<span style="color:#2980b9">SetCredentialEncrypted</span> = some_id:some_encrypted_credential
<span style="color:#7a7c7d">## from systemd.exec Capabilities</span>
<span style="color:#2980b9">CapabilityBoundingSet</span> = <span style="color:#da4453">~</span> <span style="color:#27aeae;font-weight:bold">CAP_SYS_ADMIN</span> <span style="color:#27aeae;font-weight:bold">CAP_DAC_OVERRIDE</span> <span style="color:#27aeae;font-weight:bold">CAP_SYS_PTRACE</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">CAP_NET_ADMIN</span> <span style="color:#27aeae;font-weight:bold">CAP_SYS_BOOT</span>
<span style="color:#2980b9">AmbientCapabilities</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYS_ADMIN</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">CAP_DAC_OVERRIDE</span>
<span style="color:#7a7c7d">## from systemd.exec Security</span>
<span style="color:#2980b9">NoNewPrivileges</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">SecureBits</span> = <span style="color:#27aeae;font-weight:bold">keep-caps</span> <span style="color:#27aeae;font-weight:bold">keep-caps-locked</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">no-setuid-fixup</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">no-setuid-fixup-locked</span>
<span style="color:#7a7c7d">## from systemd.exec Mandatory Access Control</span>
<span style="color:#2980b9">SELinuxContext</span> =
<span style="color:#2980b9">AppArmorProfile</span> = <span style="color:#da4453">-</span> someprofile
<span style="color:#2980b9">SmackProcessLabel</span> = <span style="color:#da4453">-</span>label
<span style="color:#7a7c7d">## from systemd.exec Process Properties</span>
<span style="color:#2980b9">LimitCPU</span> = <span style="color:#f67400">15</span><span style="font-style:italic">s</span>:<span style="color:#f67400">20</span><span style="font-style:italic">s</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span><span style="font-style:italic">G</span>:<span style="color:#f67400">24</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">LimitDATA</span> = <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#2980b9">LimitSTACK</span> = <span style="color:#f67400">512</span><span style="font-style:italic">K</span>
<span style="color:#2980b9">LimitCORE</span> = <span style="color:#f67400">128</span><span style="font-style:italic">K</span>
<span style="color:#2980b9">LimitRSS</span> = <span style="color:#f67400">2</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">LimitNOFILE</span> = <span style="color:#f67400">123</span>:<span style="color:#f67400">234</span>
<span style="color:#2980b9">LimitAS</span> = <span style="color:#f67400">3</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">LimitNPROC</span> = <span style="color:#f67400">4711</span>
<span style="color:#2980b9">LimitMEMLOCK</span> = <span style="color:#f67400">12</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">LimitLOCKS</span> = <span style="color:#f67400">321</span>
<span style="color:#2980b9">LimitSIGPENDING</span> = <span style="color:#f67400">46</span>
<span style="color:#2980b9">LimitMSGQUEUE</span> = <span style="color:#f67400">512</span><span style="font-style:italic">K</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">+12</span> : <span style="color:#f67400">+15</span>
<span style="color:#2980b9">LimitRTPRIO</span> = <span style="color:#f67400">20</span> : <span style="color:#f67400">40</span>
<span style="color:#2980b9">LimitRTTIME</span> = <span style="color:#f67400">12</span><span style="font-style:italic">us</span> : <span style="color:#f67400">15</span>
<span style="color:#2980b9">UMask</span> = <span style="color:#f67400">0022</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">default</span> <span style="color:#27aeae;font-weight:bold">private-dax</span> <span style="color:#27aeae;font-weight:bold">shared-dax</span>
<span style="color:#2980b9">KeyringMode</span> = <span style="color:#27aeae;font-weight:bold">private</span>
<span style="color:#2980b9">OOMScoreAdjust</span> = <span style="color:#f67400">123</span>
<span style="color:#2980b9">TimerSlackNSec</span> = <span style="color:#f67400">321</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">x86-64</span>
<span style="color:#2980b9">IgnoreSIGPIPE</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#7a7c7d">## from systemd.exec Scheduling</span>
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">+12</span>
<span style="color:#2980b9">CPUSchedulingPolicy</span> = <span style="color:#27aeae;font-weight:bold">fifo</span>
<span style="color:#2980b9">CPUSchedulingPriority</span> = <span style="color:#f67400">34</span>
<span style="color:#2980b9">CPUSchedulingResetOnFork</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">CPUAffinity</span> = <span style="color:#f67400">0</span> <span style="color:#f67400">1</span>, <span style="color:#f67400">2</span> , <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#f67400">3</span>, <span style="color:#f67400">4-8</span>
<span style="color:#2980b9">NUMAPolicy</span> = <span style="color:#27aeae;font-weight:bold">interleave</span>
<span style="color:#2980b9">NUMAMask</span> = <span style="color:#f67400">1</span>,<span style="color:#f67400">2</span>,<span style="color:#f67400">3-8</span>
<span style="color:#2980b9">IOSchedulingClass</span> = <span style="color:#27aeae;font-weight:bold">idle</span>
<span style="color:#2980b9">IOSchedulingPriority</span> = <span style="color:#f67400">5</span>
<span style="color:#7a7c7d">## from systemd.exec Sandboxing</span>
<span style="color:#2980b9">ProtectSystem</span> = <span style="color:#27aeae;font-weight:bold">strict</span>
<span style="color:#2980b9">ProtectHome</span> = <span style="color:#27aeae;font-weight:bold">read-only</span>
<span style="color:#2980b9">RuntimeDirectory</span> = some/dir:some_symlink
<span style="color:#2980b9">StateDirectory</span> = some/dir
<span style="color:#2980b9">CacheDirectory</span> = some/dir
<span style="color:#2980b9">LogsDirectory</span> = some/dir
<span style="color:#2980b9">ConfigurationDirectory</span> = some/dir
<span style="color:#2980b9">RuntimeDirectoryMode</span> = <span style="color:#f67400">0755</span>
<span style="color:#2980b9">StateDirectoryMode</span> = <span style="color:#f67400">0755</span>
<span style="color:#2980b9">CacheDirectoryMode</span> = <span style="color:#f67400">0755</span>
<span style="color:#2980b9">LogsDirectoryMode</span> = <span style="color:#f67400">0755</span>
<span style="color:#2980b9">ConfigurationDirectoryMode</span> = <span style="color:#f67400">0755</span>
<span style="color:#2980b9">RuntimeDirectoryPreserve</span> = <span style="color:#27aeae;font-weight:bold">restart</span>
<span style="color:#2980b9">TimeoutCleanSec</span> = <span style="color:#f67400">20</span>
<span style="color:#2980b9">ReadWritePaths</span> = some/dir
<span style="color:#2980b9">ReadOnlyPaths</span> = some/dir
<span style="color:#2980b9">InaccessiblePaths</span> = some/dir
<span style="color:#2980b9">TemporaryFileSystem</span> = /var:ro
<span style="color:#2980b9">PrivateTmp</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">PrivateDevices</span> = <span style="color:#27aeae;font-weight:bold">on</span>
<span style="color:#2980b9">PrivateNetwork</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">NetworkNamespacePath</span> = /some/path
<span style="color:#2980b9">PrivatePIDs</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">PrivateUsers</span> = <span style="color:#27aeae;font-weight:bold">off</span>
<span style="color:#2980b9">ProtectHostname</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">ProtectClock</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">ProtectKernelTunables</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">ProtectKernelModules</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">ProtectKernelLogs</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">y</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#da4453">~</span> <span style="color:#27aeae;font-weight:bold">AF_INET</span> <span style="color:#27aeae;font-weight:bold">AF_VSOCK</span>
<span style="color:#2980b9">RestrictFileSystems</span> = <span style="color:#da4453">~</span><span style="color:#27aeae;font-weight:bold">btrfs</span> <span style="color:#27aeae;font-weight:bold">ntfs3</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">@temporary</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span> <span style="color:#27aeae;font-weight:bold">net</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">ipc</span>
<span style="color:#2980b9">LockPersonality</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">MemoryDenyWriteExecute</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">RestrictRealtime</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">RestrictSUIDSGID</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">RemoveIPC</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">PrivateMounts</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">MountFlags</span> = <span style="color:#27aeae;font-weight:bold">shared</span>
<span style="color:#7a7c7d">## from systemd.exec System Call Filtering</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@debug</span> <span style="color:#27aeae;font-weight:bold">@aio</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ETIMEDOUT</span>
<span style="color:#2980b9">SystemCallArchitectures</span> = <span style="color:#27aeae;font-weight:bold">mips64-n32</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">native</span> <span style="color:#27aeae;font-weight:bold">sparc</span>
<span style="color:#2980b9">SystemCallLog</span> = <span style="color:#da4453">~</span> some_name <span style="color:#fdbc4b;font-weight:bold">\</span>
another_name
<span style="color:#7a7c7d">## from systemd.exec System Call Environment</span>
<span style="color:#2980b9">Environment</span> = <span style="color:#27aeae">DISPLAY</span>=:<span style="color:#3daee9">%i</span>
<span style="color:#2980b9">Environment</span> = <span style="color:#27aeae">XAUTHORITY</span>=<span style="color:#3daee9">%t</span>/Xauthority.<span style="color:#3daee9">%i</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
"<span style="color:#27aeae">var</span>=value with spaces"
<span style="color:#2980b9">Environment</span> = <span style="color:#27aeae">XDG_VTNR</span>=vt<span style="color:#3daee9">%i</span>
<span style="color:#2980b9">EnvironmentFile</span> = <span style="color:#da4453">-</span> /some/path
<span style="color:#2980b9">PassEnvironment</span> = SOME VARIABLES TO PASS
<span style="color:#2980b9">UnsetEnvironment</span> = SOME VARIABLES TO BE UNSET
<span style="color:#7a7c7d">## from systemd.exec Logging and Standard Input/Output</span>
<span style="color:#2980b9">StandardInput</span> = <span style="color:#27aeae;font-weight:bold">file:</span>/some/absolute/path
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">journal+console</span>
<span style="color:#2980b9">StandardError</span> = <span style="color:#27aeae;font-weight:bold">inherit</span>
<span style="color:#2980b9">StandardInputText</span> = SWNrIHNpdHplIGRhIHVuJyBlc3NlIEtsb3B
<span style="color:#2980b9">StandardInputData</span> = yBkZW5rIG5hbnUhCkpldHogaXNzZSB1ZmYsIGVy
<span style="color:#2980b9">LogLevelMax</span> = <span style="color:#27aeae;font-weight:bold">info</span>
<span style="color:#2980b9">LogExtraFields</span> = <span style="color:#27aeae">FIELD</span>=VALUE <span style="color:#27aeae">OTHER_FIELD</span>=VALUE2
<span style="color:#2980b9">LogRateLimitIntervalSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">s</span> <span style="color:#f67400">500</span><span style="font-style:italic">ms</span>
<span style="color:#2980b9">LogRateLimitBurst</span> = <span style="color:#f67400">50</span>
<span style="color:#2980b9">LogFilterPatterns</span> = <span style="color:#da4453">~</span>some_rx
<span style="color:#2980b9">LogFilterPatterns</span> = \x7esome_rx
<span style="color:#2980b9">LogNamespace</span> = some_name
<span style="color:#2980b9">SyslogIdentifier</span> = some_identifier
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">daemon</span>
<span style="color:#2980b9">SyslogLevel</span> = <span style="color:#27aeae;font-weight:bold">debug</span>
<span style="color:#2980b9">SyslogLevelPrefix</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">TTYPath</span> = /dev/console
<span style="color:#2980b9">TTYReset</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">TTYVHangup</span> = <span style="color:#27aeae;font-weight:bold">on</span>
<span style="color:#2980b9">TTYRows</span> = <span style="color:#f67400">24</span>
<span style="color:#2980b9">TTYColumns</span> = <span style="color:#f67400">80</span>
<span style="color:#2980b9">TTYVTDisallocate</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#7a7c7d">## from systemd.exec System V Compatibility</span>
<span style="color:#2980b9">UtmpIdentifier</span> = utid
<span style="color:#2980b9">UtmpMode</span> = <span style="color:#27aeae;font-weight:bold">init</span>
<span style="color:#7a7c7d">## from systemd.kill</span>
<span style="color:#2980b9">KillMode</span> = <span style="color:#27aeae;font-weight:bold">process</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGABRT</span>
<span style="color:#2980b9">RestartKillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGHUP</span>
<span style="color:#2980b9">SendSIGHUP</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">SendSIGKILL</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">FinalKillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGABRT</span>
<span style="color:#2980b9">WatchdogSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGQUIT</span>
<span style="color:#7a7c7d">## from systemd.resource-control</span>
<span style="color:#2980b9">CPUAccounting</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">CPUWeight</span> = <span style="color:#f67400">1234</span>
<span style="color:#2980b9">StartupCPUWeight</span> = <span style="color:#f67400">321</span>
<span style="color:#2980b9">CPUQuota</span> = <span style="color:#f67400">123.4</span><span style="font-style:italic">%</span>
<span style="color:#2980b9">CPUQuotaPeriodSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">s</span> <span style="color:#f67400">23</span><span style="font-style:italic">ms</span> <span style="color:#f67400">45</span><span style="font-style:italic">us</span>
<span style="color:#2980b9">AllowedCPUs</span> = <span style="color:#f67400">0-8</span>, <span style="color:#f67400">12</span>
<span style="color:#2980b9">StartupAllowedCPUs</span> = <span style="color:#f67400">0-24</span>
<span style="color:#2980b9">AllowedMemoryNodes</span> = <span style="color:#f67400">5-8</span>, <span style="color:#f67400">12</span>
<span style="color:#2980b9">StartupAllowedMemoryNodes</span> = <span style="color:#f67400">5-10</span>, <span style="color:#f67400">12</span>
<span style="color:#2980b9">MemoryAccounting</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#f67400">10</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">MemoryLow</span> = <span style="color:#f67400">20</span><span style="font-style:italic">%</span>
<span style="color:#2980b9">StartupMemoryLow</span> = <span style="color:#f67400">22</span><span style="font-style:italic">%</span>
<span style="color:#2980b9">DefaultStartupMemoryLow</span> = <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#2980b9">MemoryHigh</span> = <span style="color:#f67400">40 </span><span style="font-style:italic">%</span>
<span style="color:#2980b9">StartupMemoryHigh</span> = <span style="color:#f67400">12</span><span style="font-style:italic">%</span>
<span style="color:#2980b9">MemoryMax</span> = <span style="color:#f67400">60</span><span style="font-style:italic">%</span>
<span style="color:#2980b9">StartupMemoryMax</span> = <span style="color:#f67400">55</span><span style="font-style:italic">%</span>
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#f67400">10</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">StartupMemorySwapMax</span> = <span style="color:#f67400">5</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">MemoryZSwapMax</span> = <span style="color:#f67400">2</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">MemoryZSwapWriteback</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">StartupMemoryZSwapMax</span> = <span style="color:#f67400">1500</span>k
<span style="color:#2980b9">TasksAccounting</span> = <span style="color:#27aeae;font-weight:bold">on</span>
<span style="color:#2980b9">TasksMax</span> = <span style="color:#f67400">50</span><span style="font-style:italic">%</span>
<span style="color:#2980b9">IOAccounting</span> = <span style="color:#27aeae;font-weight:bold">on</span>
<span style="color:#2980b9">IOWeight</span> = <span style="color:#f67400">1000</span>
<span style="color:#2980b9">StartupIOWeight</span> = <span style="color:#f67400">500</span>
<span style="color:#2980b9">IODeviceWeight</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">1000</span>
<span style="color:#2980b9">IOReadBandwidthMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">10</span><span style="font-style:italic">M</span>
<span style="color:#2980b9">IOWriteBandwidthMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">5</span><span style="font-style:italic">M</span>
<span style="color:#2980b9">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">1</span><span style="font-style:italic">K</span>
<span style="color:#2980b9">IOWriteIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">2</span><span style="font-style:italic">K</span>
<span style="color:#2980b9">IODeviceLatencyTargetSec</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">5</span><span style="font-style:italic">s</span> <span style="color:#f67400">20</span><span style="font-style:italic">ms</span> <span style="color:#f67400">100</span><span style="font-style:italic">us</span>
<span style="color:#2980b9">IPAccounting</span> = <span style="color:#27aeae;font-weight:bold">on</span>
<span style="color:#2980b9">IPAddressAllow</span> = <span style="color:#f67400">127</span>.<span style="color:#f67400">0</span>.<span style="color:#f67400">0</span>.<span style="color:#f67400">0</span>/<span style="color:#f67400">8</span> ::<span style="color:#f67400">1</span>/<span style="color:#f67400">128</span>
<span style="color:#2980b9">IPAddressDeny</span> = <span style="color:#f67400">127</span>.<span style="color:#f67400">0</span>.<span style="color:#f67400">0</span>.<span style="color:#f67400">0</span>/<span style="color:#f67400">8</span> ::<span style="color:#f67400">1</span>/<span style="color:#f67400">128</span>
<span style="color:#2980b9">DevicePolicy</span> = <span style="color:#27aeae;font-weight:bold">strict</span>
<span style="color:#2980b9">Slice</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.slice</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">bpf-firewall</span>
<span style="color:#2980b9">DelegateSubgroup</span> = some-cgroup-name
<span style="color:#2980b9">DisableControllers</span> = <span style="color:#27aeae;font-weight:bold">cpu</span> <span style="color:#27aeae;font-weight:bold">io</span>
<span style="color:#2980b9">ManagedOOMSwap</span> = <span style="color:#27aeae;font-weight:bold">auto</span>
<span style="color:#2980b9">ManagedOOMMemoryPressure</span> = <span style="color:#27aeae;font-weight:bold">kill</span>
<span style="color:#2980b9">ManagedOOMMemoryPressureLimit</span> = <span style="color:#f67400">50</span><span style="font-style:italic">%</span>
<span style="color:#2980b9">ManagedOOMMemoryPressureDurationSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">s</span> <span style="color:#f67400">50</span><span style="font-style:italic">ms</span>
<span style="color:#2980b9">ManagedOOMPreference</span> = <span style="color:#27aeae;font-weight:bold">omit</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = <span style="color:#27aeae;font-weight:bold">skip</span>
<span style="color:#2980b9">MemoryPressureThresholdSec</span> = <span style="color:#f67400">50</span><span style="font-style:italic">ms</span>
<span style="color:#2980b9">CoredumpReceive</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">BPFProgram</span> = <span style="color:#27aeae;font-weight:bold">bind6</span>:/sys/fs/bpf/sock-addr-hook
<span style="color:#2980b9">RestrictNetworkInterfaces</span> = <span style="color:#da4453">~</span>eth1 eth2
<span style="color:#2980b9">NFTSet</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span>:<span style="color:#27aeae;font-weight:bold">inet</span>:filter:my_service <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">user</span>:<span style="color:#27aeae;font-weight:bold">inet</span>:filter:serviceuser
<span style="font-weight:bold">[Slice]</span>
<span style="color:#7a7c7d"># The Slice section may include options of the resource-control option group.</span>
<span style="color:#7a7c7d"># See [Service] for available options of systemd.resource-control.</span>
<span style="font-weight:bold">[Socket]</span>
<span style="color:#2980b9">ListenStream</span> = 0.0.0.0:4000
<span style="color:#2980b9">ListenDatagram</span> = /path/to/socket
<span style="color:#2980b9">ListenFIFO</span> = /some/path
<span style="color:#2980b9">ListenSequentialPacket</span> = @namespace
<span style="color:#2980b9">ListenSpecial</span> = /some/path
<span style="color:#2980b9">ListenNetlink</span> = kobject-uevent
<span style="color:#2980b9">ListenMessageQueue</span> = /queue
<span style="color:#2980b9">ListenUSBFunction</span> = /some/path
<span style="color:#2980b9">SocketProtocol</span> = <span style="color:#27aeae;font-weight:bold">sctp</span>
<span style="color:#2980b9">BindIPv6Only</span> = <span style="color:#27aeae;font-weight:bold">both</span>
<span style="color:#2980b9">Backlog</span> = <span style="color:#f67400">123</span>
<span style="color:#2980b9">BindToDevice</span> = name
<span style="color:#2980b9">SocketGroup</span> = users
<span style="color:#2980b9">SocketUser</span> = someuser
<span style="color:#2980b9">SocketMode</span> = <span style="color:#f67400">0644</span>
<span style="color:#2980b9">DirectoryMode</span> = <span style="color:#f67400">0744</span>
<span style="color:#2980b9">Accept</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">Writable</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">FlushPending</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">MaxConnections</span> = <span style="color:#f67400">34</span>
<span style="color:#2980b9">MaxConnectionsPerSource</span> = <span style="color:#f67400">10</span>
<span style="color:#2980b9">KeepAlive</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">KeepAliveTimeSec</span> = <span style="color:#f67400">15</span><span style="font-style:italic">s</span> <span style="color:#f67400">30</span><span style="font-style:italic">ms</span>
<span style="color:#2980b9">KeepAliveIntervalSec</span> = <span style="color:#f67400">10</span><span style="font-style:italic">s</span> <span style="color:#f67400">123</span><span style="font-style:italic">us</span>
<span style="color:#2980b9">KeepAliveProbes</span> = <span style="color:#f67400">12</span>
<span style="color:#2980b9">NoDelay</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">Priority</span> = <span style="color:#f67400">5</span>
<span style="color:#2980b9">DeferAcceptSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">s</span> <span style="color:#f67400">100</span><span style="font-style:italic">ms</span>
<span style="color:#2980b9">ReceiveBuffer</span> = <span style="color:#f67400">10</span><span style="font-style:italic">K</span>
<span style="color:#2980b9">SendBuffer</span> = <span style="color:#f67400">15</span><span style="font-style:italic">K</span>
<span style="color:#2980b9">IPTOS</span> = <span style="color:#27aeae;font-weight:bold">low-delay</span>
<span style="color:#2980b9">IPTTL</span> = <span style="color:#f67400">12</span>
<span style="color:#2980b9">Mark</span> = <span style="color:#f67400">12</span>
<span style="color:#2980b9">ReusePort</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">SmackLabel</span> = value
<span style="color:#2980b9">SmackLabelIPIn</span> = value
<span style="color:#2980b9">SmackLabelIPOut</span> = value
<span style="color:#2980b9">SELinuxContextFromNet</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">PipeSize</span> = <span style="color:#f67400">1</span><span style="font-style:italic">M</span>
<span style="color:#2980b9">MessageQueueMaxMessages</span> = <span style="color:#f67400">12</span>
<span style="color:#2980b9">MessageQueueMessageSize</span> = <span style="color:#f67400">1234</span>
<span style="color:#2980b9">FreeBind</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">Transparent</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">Broadcast</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">PassCredentials</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">PassSecurity</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">PassPacketInfo</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">Timestamping</span> = <span style="color:#27aeae;font-weight:bold">nsec</span>
<span style="color:#2980b9">TCPCongestion</span> = westwood
<span style="color:#2980b9">ExecStartPre</span> = <span style="color:#da4453">+</span>/usr/bin/start/pre
<span style="color:#2980b9">ExecStartPost</span> = <span style="color:#da4453">@</span>/usr/bin/start/post arg
<span style="color:#2980b9">ExecStopPre</span> = /usr/bin/stop/pre
<span style="color:#2980b9">ExecStopPost</span> = /usr/bin/stop/post
<span style="color:#2980b9">TimeoutSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">m</span> <span style="color:#f67400">30</span><span style="font-style:italic">sec</span>
<span style="color:#2980b9">Service</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">RemoveOnStop</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">Symlinks</span> = /some/path /some/other/path
<span style="color:#2980b9">FileDescriptorName</span> = some_name
<span style="color:#2980b9">TriggerLimitIntervalSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">s</span> <span style="color:#f67400">500</span><span style="font-style:italic">ms</span>
<span style="color:#2980b9">TriggerLimitBurst</span> = <span style="color:#f67400">50</span>
<span style="color:#2980b9">PollLimitIntervalSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">s</span> <span style="color:#f67400">300</span><span style="font-style:italic">ms</span>
<span style="color:#2980b9">PollLimitBurst</span> = <span style="color:#f67400">120</span>
<span style="color:#2980b9">PassFileDescriptorsToExec</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#7a7c7d"># see [Service] for options from systemd.exec and systemd.kill</span>
<span style="font-weight:bold">[Swap]</span>
<span style="color:#2980b9">What</span> = /dev/disk/by-uuid/5db77-fde6-424e-a1bb-e88e8996c
<span style="color:#7a7c7d"># </span><span style="color:#81ca2d;background-color:#4d1f24;font-weight:bold">NOTE</span><span style="color:#7a7c7d">: Since systemd version 256 fstab-style identifiers are supported too.</span>
<span style="color:#2980b9">What</span> = UUID=5db77-fde6-424e-a1bb-e88e8996c
<span style="color:#2980b9">Priority</span> = <span style="color:#f67400">123</span>
<span style="color:#2980b9">Options</span> = some,device,options
<span style="color:#2980b9">TimeoutSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">m</span> <span style="color:#f67400">20</span><span style="font-style:italic">s</span>
<span style="color:#7a7c7d"># see [Service] for options from systemd.exec and systemd.kill</span>
<span style="font-weight:bold">[Timer]</span>
<span style="color:#2980b9">OnActiveSec</span> = <span style="color:#f67400">90</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">5</span><span style="font-style:italic">min</span> <span style="color:#f67400">15</span><span style="font-style:italic">s</span> <span style="color:#f67400">100</span><span style="font-style:italic">ms</span>
<span style="color:#2980b9">OnStartupSec</span> = <span style="color:#f67400">2 </span><span style="font-style:italic">minutes</span>
<span style="color:#2980b9">OnUnitActiveSec</span> = <span style="color:#f67400">1 </span><span style="font-style:italic">min</span>
<span style="color:#2980b9">OnUnitInactiveSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">m</span> <span style="color:#f67400">30</span><span style="font-style:italic">s</span>
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">daily</span>
<span style="color:#2980b9">AccuracySec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">min</span> <span style="color:#f67400">10</span><span style="font-style:italic">sec</span>
<span style="color:#2980b9">RandomizedDelaySec</span> = <span style="color:#f67400">30</span><span style="font-style:italic">s</span>
<span style="color:#2980b9">FixedRandomDelay</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">DeferReactivation</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">OnClockChange</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">OnTimezoneChange</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some_timed</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Persistent</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">WakeSystem</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">RemainAfterElapse</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">Description</span> = Testing systemd unit
<span style="color:#2980b9">Documentation</span> = https://docs.kde.org/stable5/en/applications/katepart/highlight.html <span style="color:#fdbc4b;font-weight:bold">\</span>
man:/systemd.unit
<span style="color:#2980b9">Requires</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Requisite</span> = <span style="color:#27ae60">some-service-name</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Wants</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">BindsTo</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">BindsTo</span> = <span style="color:#3daee9">%i</span><span style="color:#27ae60;font-style:italic">.mount</span>
<span style="color:#2980b9">PartOf</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Upholds</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#27ae60">some-other</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Conflicts</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Before</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">After</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@instance</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">OnFailure</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">OnSuccess</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#27ae60">some-other</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">PropagatesReloadTo</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">ReloadPropagatedFrom</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">JoinsNamespaceOf</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">PropagatesStopTo</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#27ae60">some-other</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">StopPropagatedFrom</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#27ae60">some-other</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">RequiresMountsFor</span> = /tmp /var/log <span style="color:#3daee9">%h</span>
<span style="color:#2980b9">WantsMountsFor</span> = /tmp /var/log <span style="color:#3daee9">%h</span>
<span style="color:#2980b9">OnFailureJobMode</span> = <span style="color:#27aeae;font-weight:bold">fail</span>
<span style="color:#2980b9">OnSuccessJobMode</span> = <span style="color:#27aeae;font-weight:bold">replace</span>
<span style="color:#2980b9">IgnoreOnIsolate</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">RefuseManualStart</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">RefuseManualStop</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">AllowIsolate</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">DefaultDependencies</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">SurviveFinalKillSignal</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">CollectMode</span> = <span style="color:#27aeae;font-weight:bold">inactive</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">reboot</span>
<span style="color:#2980b9">SuccessAction</span> = <span style="color:#27aeae;font-weight:bold">none</span>
<span style="color:#2980b9">FailureActionExitStatus</span> = <span style="color:#f67400">15</span>
<span style="color:#2980b9">SuccessActionExitStatus</span> = <span style="color:#f67400">255</span>
<span style="color:#2980b9">JobTimeoutSec</span> = <span style="color:#f67400">10</span>
<span style="color:#2980b9">JobRunningTimeoutSec</span> = <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#2980b9">JobTimeoutAction</span> = <span style="color:#27aeae;font-weight:bold">none</span>
<span style="color:#2980b9">JobTimeoutRebootArgument</span> = some argument
<span style="color:#2980b9">StartLimitIntervalSec</span> = <span style="color:#f67400">0</span>
<span style="color:#2980b9">StartLimitBurst</span> = <span style="color:#f67400">10</span>
<span style="color:#2980b9">StartLimitAction</span> = <span style="color:#27aeae;font-weight:bold">none</span>
<span style="color:#2980b9">RebootArgument</span> = some argument
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">x86</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#da4453">|</span><span style="color:#27aeae;font-weight:bold">vmware</span>
<span style="color:#2980b9">ConditionHost</span> = <span style="color:#da4453">!</span>shodan<span style="color:#3daee9">*</span>
<span style="color:#2980b9">ConditionKernelCommandLine</span> = <span style="color:#da4453">!</span>kernel_option
<span style="color:#2980b9">ConditionKernelVersion</span> = <span style="color:#da4453">| </span>>= 4.<span style="color:#3daee9">*</span>
<span style="color:#2980b9">ConditionCredential</span> = name
<span style="color:#2980b9">ConditionEnvironment</span> = SOME_ENVIRONMENT_VARIABLE=some_value
<span style="color:#2980b9">ConditionSecurity</span> = <span style="color:#da4453">| !</span> <span style="color:#27aeae;font-weight:bold">selinux</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#da4453">!</span><span style="color:#27aeae;font-weight:bold">CAP_NET_ADMIN</span>
<span style="color:#2980b9">ConditionACPower</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">ConditionNeedsUpdate</span> = <span style="color:#da4453">!</span>/var
<span style="color:#2980b9">ConditionFirstBoot</span> = <span style="color:#da4453">|</span><span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">ConditionPathExists</span> = <span style="color:#da4453">!</span>/some/absolute/path
<span style="color:#2980b9">ConditionPathExistsGlob</span> = <span style="color:#da4453">|!</span>/m<span style="color:#3daee9">?</span>t/s<span style="color:#3daee9">[ao]</span>me/path<span style="color:#3daee9">*</span>
<span style="color:#2980b9">ConditionPathIsDirectory</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">ConditionPathIsSymbolicLink</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">ConditionPathIsMountPoint</span> = /some/path
<span style="color:#2980b9">ConditionPathIsReadWrite</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">ConditionPathIsEncrypted</span> = <span style="color:#da4453">!</span>/some/absolute/path
<span style="color:#2980b9">ConditionDirectoryNotEmpty</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">ConditionFileNotEmpty</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">ConditionFileIsExecutable</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">ConditionUser</span> = <span style="color:#da4453">|</span><span style="color:#27aeae;font-weight:bold">@system</span>
<span style="color:#2980b9">ConditionGroup</span> = <span style="color:#da4453">|</span>groupname
<span style="color:#2980b9">ConditionControlGroupController</span> = <span style="color:#27aeae;font-weight:bold">memory</span>
<span style="color:#2980b9">ConditionMemory</span> = <span style="color:#da4453">| </span>>= <span style="color:#f67400">1</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">ConditionCPUs</span> = <span style="color:#da4453">| </span>&lt; <span style="color:#f67400">8</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#da4453">| </span><span style="color:#27aeae;font-weight:bold">sse2</span>
<span style="color:#2980b9">ConditionOSRelease</span> = ID=some-id
<span style="color:#2980b9">ConditionMemoryPressure</span> = <span style="color:#f67400">20</span>%<span style="color:#da4453">/</span><span style="color:#27aeae;font-weight:bold;font-style:italic">5min</span>
<span style="color:#2980b9">ConditionCPUPressure</span> = <span style="color:#f67400">12</span>%<span style="color:#da4453">/</span><span style="color:#27aeae;font-weight:bold;font-style:italic">10sec</span>
<span style="color:#2980b9">ConditionIOPressure</span> = <span style="color:#f67400">30</span>% <span style="color:#da4453">/</span> <span style="color:#27aeae;font-weight:bold;font-style:italic">1min</span>
<span style="color:#2980b9">AssertArchitecture</span> = <span style="color:#27aeae;font-weight:bold">x86</span>
<span style="color:#2980b9">AssertVirtualization</span> = <span style="color:#da4453">|</span><span style="color:#27aeae;font-weight:bold">vmware</span>
<span style="color:#2980b9">AssertHost</span> = <span style="color:#da4453">!</span>shodan<span style="color:#3daee9">*</span>
<span style="color:#2980b9">AssertKernelCommandLine</span> = <span style="color:#da4453">!</span>kernel_option
<span style="color:#2980b9">AssertKernelVersion</span> = <span style="color:#da4453">!</span>>=5.3
<span style="color:#2980b9">AssertCredential</span> = name
<span style="color:#2980b9">AssertEnvironment</span> = SOME_ENVIRONMENT_VARIABLE=some_value
<span style="color:#2980b9">AssertSecurity</span> = <span style="color:#da4453">| !</span> <span style="color:#27aeae;font-weight:bold">selinux</span>
<span style="color:#2980b9">AssertCapability</span> = <span style="color:#da4453">!</span><span style="color:#27aeae;font-weight:bold">CAP_NET_ADMIN</span>
<span style="color:#2980b9">AssertACPower</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">AssertNeedsUpdate</span> = <span style="color:#da4453">!</span>/var
<span style="color:#2980b9">AssertFirstBoot</span> = <span style="color:#da4453">|</span><span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">AssertPathExists</span> = <span style="color:#da4453">!</span>/some/absolute/path
<span style="color:#2980b9">AssertPathExistsGlob</span> = <span style="color:#da4453">|!</span>/mnt/<span style="color:#3daee9">*</span>
<span style="color:#2980b9">AssertPathIsDirectory</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">AssertPathIsSymbolicLink</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">AssertPathIsMountPoint</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">AssertPathIsReadWrite</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">AssertPathIsEncrypted</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">AssertDirectoryNotEmpty</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">AssertFileNotEmpty</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">AssertFileIsExecutable</span> = <span style="color:#da4453">!</span>/some/path
<span style="color:#2980b9">AssertUser</span> = <span style="color:#da4453">|</span><span style="color:#27aeae;font-weight:bold">@system</span>
<span style="color:#2980b9">AssertGroup</span> = <span style="color:#da4453">|</span>groupname
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#27aeae;font-weight:bold">memory</span>
<span style="color:#2980b9">AssertCPUFeature</span> = <span style="color:#da4453">| </span><span style="color:#27aeae;font-weight:bold">sse4_2</span>
<span style="color:#2980b9">AssertOSRelease</span> = ID=some-id
<span style="color:#2980b9">AssertMemoryPressure</span> = <span style="color:#f67400">20</span>%<span style="color:#da4453">/</span><span style="color:#27aeae;font-weight:bold;font-style:italic">5min</span>
<span style="color:#2980b9">AssertCPUPressure</span> = <span style="color:#f67400">12</span>%<span style="color:#da4453">/</span><span style="color:#27aeae;font-weight:bold;font-style:italic">10sec</span>
<span style="color:#2980b9">AssertIOPressure</span> = <span style="color:#f67400">30</span>% <span style="color:#da4453">/</span> <span style="color:#27aeae;font-weight:bold;font-style:italic">1min</span>
<span style="color:#7a7c7d">###### invalid sections</span>
[Device]
[Invalid]
<span style="font-weight:bold">[Slice]</span>
[Target]
<span style="color:#7a7c7d">############</span>
<span style="color:#7a7c7d"># Extensions</span>
<span style="color:#7a7c7d">############</span>
<span style="color:#7a7c7d">###### option</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">Description</span> = testing extensions
<span style="font-style:italic">X-this = some value</span>
<span style="font-style:italic">X-multiple-lines = some.service </span><span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="font-style:italic"> other service</span>
<span style="color:#7a7c7d">###### section</span>
<span style="font-weight:bold;font-style:italic">[X-Unit]</span>
<span style="font-style:italic">name = value</span>
<span style="color:#7a7c7d">## Comments in an extension section are just the same as elsewhere.</span>
<span style="font-style:italic">Some text in an extension section.</span>
<span style="font-style:italic">The extension section ends with the next section header.</span>
<span style="color:#7a7c7d">########</span>
<span style="color:#7a7c7d"># Format</span>
<span style="color:#7a7c7d">########</span>
<span style="color:#7a7c7d">###### for options accepting multiple values, lines may be continued</span>
<span style="color:#7a7c7d"># using a trailing backlash</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">Before</span> = <span style="color:#27ae60">before-me</span><span style="color:#27ae60;font-style:italic">.socket </span><span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27ae60">before-me</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#7a7c7d">###### additional spaces are OK</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">RequiresMountsFor</span> = /tmp /var/log
<span style="color:#7a7c7d">########################################################</span>
<span style="color:#7a7c7d"># Testing valid and invalid values for defined contexts.</span>
<span style="color:#7a7c7d">########################################################</span>
<span style="color:#7a7c7d">###### invalid options</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#7a7c7d"># missing assignment operator</span>
<span style="color:#2980b9">Description</span> is invalid as it lacks the assignment operator
<span style="color:#7a7c7d"># invalid option name</span>
InvalidOption = some text
<span style="color:#7a7c7d"># WantedBy belongs to the [Install] section</span>
WantedBy = some.service some.socket
<span style="color:#7a7c7d">###### AC architecture</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#7a7c7d"># see "architecture" for all possible values</span>
<span style="color:#2980b9">AssertArchitecture</span> = <span style="color:#27aeae;font-weight:bold">alpha</span>
<span style="color:#2980b9">AssertArchitecture</span> = <span style="color:#da4453">| </span><span style="color:#27aeae;font-weight:bold">alpha</span>
<span style="color:#2980b9">AssertArchitecture</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">alpha</span>
<span style="color:#2980b9">AssertArchitecture</span> = <span style="color:#da4453">!</span> <span style="color:#27aeae;font-weight:bold">alpha</span>
<span style="color:#7a7c7d"># other options</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">alpha</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">AssertArchitecture</span> = <span style="color:#da4453">!</span>| <span style="color:#27aeae;font-weight:bold">alpha</span>
<span style="color:#2980b9">AssertArchitecture</span> = <span style="color:#da4453">|</span>| <span style="color:#27aeae;font-weight:bold">alpha</span>
<span style="color:#2980b9">AssertArchitecture</span> = <span style="color:#da4453">!</span>! <span style="color:#27aeae;font-weight:bold">alpha</span>
<span style="color:#7a7c7d">###### AC boolean</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#7a7c7d"># see "boolean" for all possible values</span>
<span style="color:#2980b9">AssertACPower</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">AssertACPower</span> = <span style="color:#da4453">| </span><span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">AssertACPower</span> = <span style="color:#da4453">| !</span> <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">AssertACPower</span> = <span style="color:#da4453">!</span> <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#7a7c7d"># other options</span>
<span style="color:#2980b9">AssertFirstBoot</span> = <span style="color:#da4453">| !</span> <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">ConditionACPower</span> = <span style="color:#da4453">| !</span> <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">ConditionFirstBoot</span> = <span style="color:#da4453">| !</span> <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">AssertACPower</span> = <span style="color:#da4453">!</span> | <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">AssertACPower</span> = <span style="color:#da4453">| </span>| <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">AssertACPower</span> = <span style="color:#da4453">!</span>! <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#7a7c7d">###### AC capability</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#7a7c7d"># see "capability" for all possible values</span>
<span style="color:#2980b9">AssertCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_CHOWN</span>
<span style="color:#2980b9">AssertCapability</span> = <span style="color:#da4453">| </span><span style="color:#27aeae;font-weight:bold">CAP_CHOWN</span>
<span style="color:#2980b9">AssertCapability</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">CAP_CHOWN</span>
<span style="color:#2980b9">AssertCapability</span> = <span style="color:#da4453">!</span> <span style="color:#27aeae;font-weight:bold">CAP_CHOWN</span>
<span style="color:#7a7c7d"># other options</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">CAP_CHOWN</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">AssertCapability</span> = <span style="color:#da4453">!</span>| <span style="color:#27aeae;font-weight:bold">CAP_CHOWN</span>
<span style="color:#2980b9">AssertCapability</span> = <span style="color:#da4453">|</span>| <span style="color:#27aeae;font-weight:bold">CAP_CHOWN</span>
<span style="color:#2980b9">AssertCapability</span> = <span style="color:#da4453">!</span>! <span style="color:#27aeae;font-weight:bold">CAP_CHOWN</span>
<span style="color:#7a7c7d">###### AC cardinal</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">ConditionCPUs</span> = &lt; <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = &lt;= <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = = <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = != <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = >=<span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = > <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = <span style="color:#da4453">|</span>&lt; <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = <span style="color:#da4453">|</span>&lt;= <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = <span style="color:#da4453">|</span>= <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = <span style="color:#da4453">| </span>!= <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = <span style="color:#da4453">| </span>>=<span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = <span style="color:#da4453">| </span>> <span style="color:#f67400">123456789</span>
<span style="color:#7a7c7d">## other options</span>
<span style="color:#2980b9">ConditionCPUs</span> = > <span style="color:#f67400">4</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ConditionCPUs</span> = == <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = >> <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionCPUs</span> = = <span style="color:#f67400">123456789</span>.987
<span style="color:#2980b9">ConditionCPUs</span> = <span style="color:#da4453">|</span>| = <span style="color:#f67400">123456789</span>.987
<span style="color:#7a7c7d">###### AC cardinal KMGT</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">ConditionMemory</span> = > <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionMemory</span> = <span style="color:#da4453">|</span>&lt; <span style="color:#f67400">123456789</span>
<span style="color:#2980b9">ConditionMemory</span> = <span style="color:#da4453">|!</span> >= <span style="color:#f67400">1</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">ConditionMemory</span> = <span style="color:#da4453">| </span>!= <span style="color:#f67400">512</span><span style="font-style:italic">K</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#7a7c7d"># no exabyte (yet)</span>
<span style="color:#2980b9">ConditionMemory</span> = = <span style="color:#f67400">1</span>E
<span style="color:#7a7c7d">###### AC cpu feature</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#7a7c7d"># see "cpu feature" for all possible values</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">sse2</span>
<span style="color:#7a7c7d">###### AC controller cg (assert/condition for control group controller)</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#27aeae;font-weight:bold">cpu</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#da4453">| </span><span style="color:#27aeae;font-weight:bold">cpu</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">cpu</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#da4453">!</span> <span style="color:#27aeae;font-weight:bold">cpu</span>
<span style="color:#7a7c7d"># other options</span>
<span style="color:#2980b9">ConditionControlGroupController</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">cpu</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#da4453">!</span>| <span style="color:#27aeae;font-weight:bold">cpu</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#da4453">|</span>| <span style="color:#27aeae;font-weight:bold">cpu</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#da4453">!</span>! <span style="color:#27aeae;font-weight:bold">cpu</span>
<span style="color:#7a7c7d">###### AC firmware</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#7a7c7d"># see "firmware" for all possible values</span>
<span style="color:#2980b9">ConditionFirmware</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">uefi</span>
<span style="color:#7a7c7d">###### AC group</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">AssertGroup</span> = <span style="color:#da4453">| </span>name
<span style="color:#2980b9">AssertGroup</span> = <span style="color:#da4453">|!</span> name
<span style="color:#2980b9">AssertGroup</span> = <span style="color:#da4453">!</span> name
<span style="color:#7a7c7d"># other options</span>
<span style="color:#2980b9">ConditionGroup</span> = <span style="color:#da4453">|!</span> name
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">AssertGroup</span> = <span style="color:#da4453">!</span>| name
<span style="color:#2980b9">AssertGroup</span> = <span style="color:#da4453">|</span>| name
<span style="color:#2980b9">AssertGroup</span> = <span style="color:#da4453">!</span>! name
<span style="color:#7a7c7d">###### AC security</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#7a7c7d"># see "security" for all possible values</span>
<span style="color:#2980b9">AssertSecurity</span> = <span style="color:#27aeae;font-weight:bold">audit</span>
<span style="color:#2980b9">AssertSecurity</span> = <span style="color:#da4453">| </span><span style="color:#27aeae;font-weight:bold">audit</span>
<span style="color:#2980b9">AssertSecurity</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">audit</span>
<span style="color:#2980b9">AssertSecurity</span> = <span style="color:#da4453">!</span> <span style="color:#27aeae;font-weight:bold">audit</span>
<span style="color:#7a7c7d"># other options</span>
<span style="color:#2980b9">ConditionSecurity</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">audit</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">AssertSecurity</span> = <span style="color:#da4453">!</span>| <span style="color:#27aeae;font-weight:bold">audit</span>
<span style="color:#2980b9">AssertSecurity</span> = <span style="color:#da4453">|</span>| <span style="color:#27aeae;font-weight:bold">audit</span>
<span style="color:#2980b9">AssertSecurity</span> = <span style="color:#da4453">!</span>! <span style="color:#27aeae;font-weight:bold">audit</span>
<span style="color:#7a7c7d">###### AC text</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">AssertKernelCommandLine</span> = option=value
<span style="color:#2980b9">AssertKernelCommandLine</span> = <span style="color:#da4453">| </span>arg
<span style="color:#2980b9">AssertKernelCommandLine</span> = <span style="color:#da4453">|!</span> arg
<span style="color:#2980b9">AssertKernelCommandLine</span> = <span style="color:#da4453">!</span> arg
<span style="color:#7a7c7d"># other options</span>
<span style="color:#2980b9">AssertDirectoryNotEmpty</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">AssertFileIsExecutable</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">AssertFileNotEmpty</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">AssertKernelVersion</span> = <span style="color:#da4453">|!</span> arg
<span style="color:#2980b9">AssertNeedsUpdate</span> = <span style="color:#da4453">|!</span> /etc
<span style="color:#2980b9">AssertPathExists</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">AssertPathIsDirectory</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">AssertPathIsEncrypted</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">AssertPathIsMountPoint</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">AssertPathIsReadWrite</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">AssertPathIsSymbolicLink</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">ConditionDirectoryNotEmpty</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">ConditionEnvironment</span> = <span style="color:#da4453">|!</span> name=value
<span style="color:#2980b9">ConditionFileIsExecutable</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">ConditionFileNotEmpty</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">ConditionKernelCommandLine</span> = <span style="color:#da4453">|!</span> arg
<span style="color:#2980b9">ConditionKernelVersion</span> = <span style="color:#da4453">|!</span> arg
<span style="color:#2980b9">ConditionNeedsUpdate</span> = <span style="color:#da4453">|!</span> /var
<span style="color:#2980b9">ConditionPathExists</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">ConditionPathIsDirectory</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">ConditionPathIsEncrypted</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">ConditionPathIsMountPoint</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">ConditionPathIsReadWrite</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#2980b9">ConditionPathIsSymbolicLink</span> = <span style="color:#da4453">|!</span> /some/path
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">AssertKernelCommandLine</span> = <span style="color:#da4453">!</span>| arg
<span style="color:#2980b9">AssertKernelCommandLine</span> = <span style="color:#da4453">|</span>| arg
<span style="color:#2980b9">AssertKernelCommandLine</span> = <span style="color:#da4453">!</span>! arg
<span style="color:#7a7c7d">###### AC text *</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">AssertHost</span> = hostname
<span style="color:#2980b9">AssertHost</span> = hostname<span style="color:#3daee9">*</span>
<span style="color:#2980b9">AssertHost</span> = <span style="color:#da4453">| </span>hostname<span style="color:#3daee9">*</span>
<span style="color:#2980b9">AssertHost</span> = <span style="color:#da4453">|!</span>hostname<span style="color:#3daee9">*</span>
<span style="color:#2980b9">AssertHost</span> = <span style="color:#da4453">!</span>hostname<span style="color:#3daee9">*</span>
<span style="color:#7a7c7d"># other options</span>
<span style="color:#2980b9">ConditionHost</span> = <span style="color:#da4453">|!</span>hostname<span style="color:#3daee9">*</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">AssertHost</span> = <span style="color:#da4453">!</span>| hostname<span style="color:#3daee9">*</span>
<span style="color:#2980b9">AssertHost</span> = <span style="color:#da4453">|</span>| hostname<span style="color:#3daee9">*</span>
<span style="color:#2980b9">AssertHost</span> = <span style="color:#da4453">!</span>! hostname<span style="color:#3daee9">*</span>
<span style="color:#7a7c7d">###### AC text glob</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">AssertPathExistsGlob</span> = <span style="color:#da4453">|!</span>/s<span style="color:#3daee9">[ao]</span>me/path<span style="color:#3daee9">*</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ConditionPathExistsGlob</span> = <span style="color:#da4453">!</span>! /s<span style="color:#3daee9">?</span>me/path<span style="color:#3daee9">*</span>
<span style="color:#7a7c7d">###### AC threshold</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#7a7c7d"># there is only a fixed set of time spans to choose from</span>
<span style="color:#2980b9">ConditionMemoryPressure</span> = <span style="color:#f67400">10</span>%<span style="color:#da4453">/</span><span style="color:#27aeae;font-weight:bold;font-style:italic">10sec</span>
<span style="color:#2980b9">ConditionMemoryPressure</span> = <span style="color:#f67400">20</span>%<span style="color:#da4453">/</span><span style="color:#27aeae;font-weight:bold;font-style:italic">1min</span>
<span style="color:#2980b9">ConditionMemoryPressure</span> = <span style="color:#da4453">| !</span> <span style="color:#f67400">30</span> % <span style="color:#da4453">/</span> <span style="color:#27aeae;font-weight:bold;font-style:italic">5min</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#7a7c7d"># invalid time span</span>
<span style="color:#2980b9">ConditionMemoryPressure</span> = <span style="color:#f67400">30</span>%<span style="color:#da4453">/</span>5sec
<span style="color:#7a7c7d"># no %</span>
<span style="color:#2980b9">ConditionMemoryPressure</span> = 30 / 10sec
<span style="color:#7a7c7d"># no separator before time span</span>
<span style="color:#2980b9">ConditionMemoryPressure</span> = <span style="color:#f67400">30</span>% 10sec
<span style="color:#7a7c7d">###### AC user</span>
<span style="color:#2980b9">AssertUser</span> = <span style="color:#da4453">| </span><span style="color:#27aeae;font-weight:bold">@system</span>
<span style="color:#2980b9">AssertUser</span> = <span style="color:#da4453">| </span>name
<span style="color:#2980b9">AssertUser</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">@system</span>
<span style="color:#2980b9">AssertUser</span> = <span style="color:#da4453">!</span> name
<span style="color:#7a7c7d"># other options</span>
<span style="color:#2980b9">ConditionUser</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">@system</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">AssertUser</span> = <span style="color:#da4453">!</span>| name
<span style="color:#2980b9">AssertUser</span> = <span style="color:#da4453">|</span>| name
<span style="color:#2980b9">AssertUser</span> = <span style="color:#da4453">!</span>! name
<span style="color:#7a7c7d">###### AC virtualization</span>
<span style="color:#7a7c7d"># accepts boolean too</span>
<span style="color:#2980b9">AssertVirtualization</span> = <span style="color:#da4453">|</span><span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#7a7c7d"># see "virtualization" for all possible values</span>
<span style="color:#2980b9">AssertVirtualization</span> = <span style="color:#27aeae;font-weight:bold">container</span>
<span style="color:#2980b9">AssertVirtualization</span> = <span style="color:#da4453">| </span><span style="color:#27aeae;font-weight:bold">container</span>
<span style="color:#2980b9">AssertVirtualization</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">container</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#da4453">|!</span> <span style="color:#27aeae;font-weight:bold">container</span>
<span style="color:#2980b9">AssertVirtualization</span> = <span style="color:#da4453">!</span> <span style="color:#27aeae;font-weight:bold">container</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">AssertVirtualization</span> = <span style="color:#da4453">!</span> | <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">AssertVirtualization</span> = <span style="color:#da4453">| </span>| <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">AssertVirtualization</span> = <span style="color:#da4453">!</span>! <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">AssertVirtualization</span> = <span style="color:#27aeae;font-weight:bold">true</span> false
<span style="color:#7a7c7d">###### - text</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">AppArmorProfile</span> = <span style="color:#da4453">-</span> some-profile
<span style="color:#2980b9">AppArmorProfile</span> =<span style="color:#da4453">-</span>profile
<span style="color:#7a7c7d">###### -+/path list</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">ReadWritePaths</span> = <span style="color:#da4453">-</span>/some/path
<span style="color:#2980b9">ReadWritePaths</span> = <span style="color:#da4453">-+</span>/some/path
<span style="color:#2980b9">ReadWritePaths</span> = <span style="color:#da4453">+</span>/some/path
<span style="color:#2980b9">ReadWritePaths</span> =<span style="color:#da4453">+</span>/some/path-+/ <span style="color:#da4453">-</span>/some/other/path <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#da4453">-+</span>/one/more/path
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ReadWritePaths</span> = - /some/path
<span style="color:#2980b9">ReadWritePaths</span> = + /some/path
<span style="color:#2980b9">ReadWritePaths</span> = +-/some/path
<span style="color:#7a7c7d">###### ~ address family list</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_ALG</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_APPLETALK</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_ASH</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_ATMPVC</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_ATMSVC</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_AX25</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_BLUETOOTH</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_BRIDGE</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_CAIF</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_CAN</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_DECnet</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_ECONET</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_FILE</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_IB</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_IEEE802154</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_INET</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_INET6</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_IPX</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_IRDA</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_ISDN</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_IUCV</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_KCM</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_KEY</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_LLC</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_LOCAL</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_MAX</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_MPLS</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_NETBEUI</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_NETLINK</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_NETROM</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_NFC</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_PACKET</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_PHONET</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_PPPOX</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_QIPCRTR</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_RDS</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_ROSE</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_ROUTE</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_RXRPC</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_SECURITY</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_SMC</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_SNA</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_TIPC</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_UNIX</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_UNSPEC</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_VSOCK</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_WANPIPE</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_X25</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_XDP</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#da4453">~</span> <span style="color:#27aeae;font-weight:bold">AF_XDP</span> <span style="color:#27aeae;font-weight:bold">AF_LOCAL</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">AF_SECURITY</span>
<span style="color:#7a7c7d"># since version 249 an additional 'none' is supported</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">none</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = AF_INVALID
<span style="color:#7a7c7d"># multiple values including `none`</span>
<span style="color:#2980b9">RestrictAddressFamilies</span> = <span style="color:#27aeae;font-weight:bold">AF_ROUTE</span> <span style="color:#27aeae;font-weight:bold">none</span> AF_ROSE
<span style="color:#7a7c7d">###### ~ capability list</span>
<span style="color:#7a7c7d"># all the values of capability, but multple values for a single option entry are valid</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">AmbientCapabilities</span> = <span style="color:#da4453">~</span> <span style="color:#27aeae;font-weight:bold">CAP_NET_ADMIN</span> <span style="color:#27aeae;font-weight:bold">CAP_NET_RAW</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">CAP_WAKE_ALARM</span>
<span style="color:#2980b9">CapabilityBoundingSet</span>=<span style="color:#da4453">~</span><span style="color:#27aeae;font-weight:bold">CAP_NET_ADMIN</span> <span style="color:#27aeae;font-weight:bold">CAP_NET_RAW</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">CAP_WAKE_ALARM</span>
<span style="color:#7a7c7d">###### ~ namespace list</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#27aeae;font-weight:bold">ipc</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#27aeae;font-weight:bold">mnt</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#27aeae;font-weight:bold">net</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#27aeae;font-weight:bold">pid</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#27aeae;font-weight:bold">user</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#27aeae;font-weight:bold">uts</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span> <span style="color:#27aeae;font-weight:bold">uts</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#da4453">~</span> <span style="color:#27aeae;font-weight:bold">cgroup</span> <span style="color:#27aeae;font-weight:bold">pid</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">uts</span>
<span style="color:#7a7c7d"># includes boolean</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">RestrictNamespaces</span> = i<span style="color:#27aeae;font-weight:bold">n</span>valid
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#da4453">~</span> <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#7a7c7d"># if boolean, no multiple values</span>
<span style="color:#2980b9">RestrictNamespaces</span> = <span style="color:#27aeae;font-weight:bold">true</span> cgroup
<span style="color:#7a7c7d">###### ~ system call filter list</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@aio</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@basic-io</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@chown</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@clock</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@cpu-emulation</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@debug</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@default</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@file-system</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@io-event</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@ipc</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@keyring</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@memlock</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@module</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@mount</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@network-io</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@obsolete</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@privileged</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@process</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@raw-io</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@reboot</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@resources</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@setuid</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@signal</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@swap</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@sync</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@system-service</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@timer</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#27aeae;font-weight:bold">@obsolete</span> <span style="color:#27aeae;font-weight:bold">@timer</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">@swap</span>
<span style="color:#2980b9">SystemCallFilter</span> = <span style="color:#da4453">~</span> <span style="color:#27aeae;font-weight:bold">@reboot</span> <span style="color:#27aeae;font-weight:bold">@swap</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">SystemCallFilter</span> = invalid
<span style="color:#2980b9">SystemCallFilter</span> = @invalid @ sync
<span style="color:#7a7c7d">###### action</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">exit</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">exit-force</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">halt</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">halt-force</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">halt-immediate</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">kexec</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">kexec-force</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">none</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">poweroff</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">poweroff-force</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">poweroff-immediate</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">reboot</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">reboot-force</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">reboot-immediate</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">soft-reboot</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">soft-reboot-force</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">FailureAction</span> = invalid
<span style="color:#2980b9">FailureAction</span> = invalid <span style="color:#27aeae;font-weight:bold">exit</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">FailureAction</span> = <span style="color:#27aeae;font-weight:bold">none</span> exit
<span style="color:#7a7c7d">###### architecture</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">alpha</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">arc</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">arc-be</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">arm</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">arm-be</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">arm64</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">arm64-be</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">cris</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">ia64</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">m68k</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">mips</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">mips-le</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">mips64</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">mips64-le</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">parisc</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">parisc64</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">ppc</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">ppc-le</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">ppc64</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">ppc64-le</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">s390</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">s390x</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">sh</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">sh64</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">sparc</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">sparc64</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">tilegx</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">x86</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">x86-64</span>
<span style="color:#7a7c7d"># special value "native"</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">native</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ConditionArchitecture</span> = invalid
<span style="color:#2980b9">ConditionArchitecture</span> = invalid <span style="color:#27aeae;font-weight:bold">x86</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ConditionArchitecture</span> = <span style="color:#27aeae;font-weight:bold">sparc</span> x86
<span style="color:#7a7c7d">###### boolean</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">1</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">0</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">t</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">f</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">y</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">n</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">on</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">off</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = i<span style="color:#27aeae;font-weight:bold">n</span>valid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">StopWhenUnneeded</span> = <span style="color:#27aeae;font-weight:bold">false</span> true
<span style="color:#7a7c7d">###### calendar</span>
<span style="font-weight:bold">[Timer]</span>
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">daily</span>
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">hourly</span>
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">minutely</span>
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">monthly</span>
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">quarterly</span>
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">semiannually</span>
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">weekly</span>
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">yearly</span>
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">daily</span> <span style="color:#27aeae;font-weight:bold">UTC</span>
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">daily</span> <span style="color:#27aeae;font-weight:bold">utc</span>
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">monday</span> <span style="color:#3daee9">*</span>-12-<span style="color:#3daee9">*</span> 17:00
<span style="color:#2980b9">OnCalendar</span> = <span style="color:#27aeae;font-weight:bold">Mon</span> <span style="color:#3daee9">*</span>-12-<span style="color:#3daee9">*</span> 17:00
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">OnCalendar</span> = Mo <span style="color:#3daee9">*</span>-12-<span style="color:#3daee9">*</span> 17:00
<span style="color:#7a7c7d">###### capability</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_AUDIT_CONTROL</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_AUDIT_READ</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_AUDIT_WRITE</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_BLOCK_SUSPEND</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_CHECKPOINT_RESTORE</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_CHOWN</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_DAC_OVERRIDE</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_DAC_READ_SEARCH</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_FOWNER</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_FSETID</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_IPC_LOCK</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_IPC_OWNER</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_KILL</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_LEASE</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_LINUX_IMMUTABLE</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_MAC_ADMIN</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_MAC_OVERRIDE</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_MKNOD</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_NET_ADMIN</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_NET_BIND_SERVICE</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_NET_BROADCAST</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_NET_RAW</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SETGID</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SETFCAP</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SETPCAP</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SETUID</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYS_ADMIN</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYS_BOOT</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYS_CHROOT</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYS_MODULE</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYS_NICE</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYS_PACCT</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYS_PTRACE</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYS_RAWIO</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYS_RESOURCE</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYS_TIME</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYS_TTY_CONFIG</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_SYSLOG</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_WAKE_ALARM</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ConditionCapability</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ConditionCapability</span> = <span style="color:#27aeae;font-weight:bold">CAP_NET_ADMIN</span> CAP_NET_RAW
<span style="color:#7a7c7d">###### cardinal</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">StartLimitBurst</span> = <span style="color:#f67400">15</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">StartLimitBurst</span> = -10
<span style="color:#2980b9">StartLimitBurst</span> = <span style="color:#f67400">12</span>.34
<span style="color:#2980b9">StartLimitBurst</span> = <span style="color:#f67400">10</span>%
<span style="color:#2980b9">StartLimitBurst</span> = infinity
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">StartLimitBurst</span> = <span style="color:#f67400">10</span> 20
<span style="color:#7a7c7d">###### cardinal % infinity</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">TasksMax</span> = <span style="color:#f67400">15</span>
<span style="color:#2980b9">TasksMax</span> = <span style="color:#f67400">10</span><span style="font-style:italic">%</span>
<span style="color:#2980b9">TasksMax</span> = <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">TasksMax</span> = -10
<span style="color:#2980b9">TasksMax</span> = <span style="color:#f67400">12</span>.<span style="color:#f67400">34</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">TasksMax</span> = <span style="color:#f67400">10</span> <span style="color:#f67400">20</span>
<span style="color:#2980b9">TasksMax</span> = <span style="color:#27aeae;font-weight:bold">infinity</span> 20
<span style="color:#7a7c7d">###### cardinal %KGMT infinity</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#f67400">123</span>
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#f67400">12</span><span style="font-style:italic">K</span>
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#f67400">12</span><span style="font-style:italic">M</span>
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#f67400">12</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#f67400">12</span><span style="font-style:italic">T</span>
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#f67400">12 </span><span style="font-style:italic">G</span>
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#f67400">20</span><span style="font-style:italic">%</span>
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">MemoryMin</span> = invalid
<span style="color:#7a7c7d"># invalid bytes suffix</span>
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#f67400">12</span>g
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#f67400">12</span>H
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#f67400">12 </span>E
<span style="color:#2980b9">MemoryMin</span> = <span style="color:#f67400">12</span>P
<span style="color:#7a7c7d">###### cardinal KGMT</span>
<span style="font-weight:bold">[Socket]</span>
<span style="color:#2980b9">PipeSize</span> = <span style="color:#f67400">123</span>
<span style="color:#2980b9">PipeSize</span> = <span style="color:#f67400">12</span><span style="font-style:italic">K</span>
<span style="color:#2980b9">PipeSize</span> = <span style="color:#f67400">12</span><span style="font-style:italic">M</span>
<span style="color:#2980b9">PipeSize</span> = <span style="color:#f67400">12</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">PipeSize</span> = <span style="color:#f67400">12</span><span style="font-style:italic">T</span>
<span style="color:#2980b9">PipeSize</span> = <span style="color:#f67400">12 </span><span style="font-style:italic">G</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">PipeSize</span> = invalid
<span style="color:#2980b9">PipeSize</span> = infinity
<span style="color:#7a7c7d"># invalid bytes suffix</span>
<span style="color:#2980b9">PipeSize</span> = <span style="color:#f67400">12</span>g
<span style="color:#2980b9">PipeSize</span> = <span style="color:#f67400">12</span>H
<span style="color:#2980b9">PipeSize</span> = <span style="color:#f67400">12 </span>E
<span style="color:#2980b9">PipeSize</span> = <span style="color:#f67400">12</span>P
<span style="color:#2980b9">PipeSize</span> = <span style="color:#f67400">20</span>%
<span style="color:#7a7c7d">###### cardinal KGMT infinity</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#f67400">123</span>
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#f67400">12</span><span style="font-style:italic">K</span>
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#f67400">12</span><span style="font-style:italic">M</span>
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#f67400">12</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#f67400">12</span><span style="font-style:italic">T</span>
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#f67400">12 </span><span style="font-style:italic">G</span>
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">MemorySwapMax</span> = invalid
<span style="color:#7a7c7d"># invalid bytes suffix</span>
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#f67400">12</span>g
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#f67400">12</span>H
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#f67400">12 </span>E
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#f67400">12</span>P
<span style="color:#2980b9">MemorySwapMax</span> = <span style="color:#f67400">20</span>%
<span style="color:#7a7c7d">###### collect mode</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">CollectMode</span> = <span style="color:#27aeae;font-weight:bold">inactive</span>
<span style="color:#2980b9">CollectMode</span> = <span style="color:#27aeae;font-weight:bold">inactive-or-failed</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">CollectMode</span> = invalid
<span style="color:#2980b9">CollectMode</span> = invalid <span style="color:#27aeae;font-weight:bold">inactive</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">CollectMode</span> = <span style="color:#27aeae;font-weight:bold">inactive-or-failed</span> inactive
<span style="color:#7a7c7d">###### condition needs update</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">ConditionNeedsUpdate</span> = <span style="color:#da4453">!</span>/etc
<span style="color:#2980b9">ConditionNeedsUpdate</span> = <span style="color:#da4453">!</span>/var
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ConditionNeedsUpdate</span> = /home
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ConditionNeedsUpdate</span> = /etc /var
<span style="color:#7a7c7d">###### condition user</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">ConditionUser</span> = <span style="color:#27aeae;font-weight:bold">@system</span>
<span style="color:#2980b9">ConditionUser</span> = name1
<span style="color:#2980b9">ConditionUser</span> = <span style="color:#f67400">1050</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ConditionUser</span> = -1050
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ConditionUser</span> = <span style="color:#27aeae;font-weight:bold">@system</span> 1050
<span style="color:#7a7c7d">###### controller cg (control group controller)</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#27aeae;font-weight:bold">cpu</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#27aeae;font-weight:bold">io</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#27aeae;font-weight:bold">memory</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#27aeae;font-weight:bold">pids</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#27aeae;font-weight:bold">v1</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#27aeae;font-weight:bold">v2</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">AssertControlGroupController</span> = <span style="color:#27aeae;font-weight:bold">cpu</span> <span style="color:#27aeae;font-weight:bold">memory</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">AssertControlGroupController</span> = invalid
<span style="color:#7a7c7d">###### controller list</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#7a7c7d"># single controller</span>
<span style="color:#2980b9">DisableControllers</span> = <span style="color:#27aeae;font-weight:bold">blkio</span>
<span style="color:#2980b9">DisableControllers</span> = <span style="color:#27aeae;font-weight:bold">bpf-devices</span>
<span style="color:#2980b9">DisableControllers</span> = <span style="color:#27aeae;font-weight:bold">bpf-firewall</span>
<span style="color:#2980b9">DisableControllers</span> = <span style="color:#27aeae;font-weight:bold">cpu</span>
<span style="color:#2980b9">DisableControllers</span> = <span style="color:#27aeae;font-weight:bold">cpuacct</span>
<span style="color:#2980b9">DisableControllers</span> = <span style="color:#27aeae;font-weight:bold">cpuset</span>
<span style="color:#2980b9">DisableControllers</span> = <span style="color:#27aeae;font-weight:bold">devices</span>
<span style="color:#2980b9">DisableControllers</span> = <span style="color:#27aeae;font-weight:bold">io</span>
<span style="color:#2980b9">DisableControllers</span> = <span style="color:#27aeae;font-weight:bold">memory</span>
<span style="color:#2980b9">DisableControllers</span> = <span style="color:#27aeae;font-weight:bold">pids</span>
<span style="color:#7a7c7d"># multiple controllers</span>
<span style="color:#2980b9">DisableControllers</span> = <span style="color:#27aeae;font-weight:bold">cpu</span> <span style="color:#27aeae;font-weight:bold">io</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">memory</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">DisableControllers</span> = dev invalid
<span style="color:#7a7c7d">###### cpu affinity</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#7a7c7d"># either "numa" or any of the values for "cpu index list"</span>
<span style="color:#2980b9">CPUAffinity</span> = <span style="color:#27aeae;font-weight:bold">numa</span>
<span style="color:#2980b9">CPUAffinity</span> = <span style="color:#f67400">0</span> <span style="color:#f67400">1</span>, <span style="color:#f67400">2</span> , <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#f67400">3</span>, <span style="color:#f67400">4-8</span> , <span style="color:#f67400">10 - 12</span>
<span style="color:#7a7c7d"># since version 249 specifiers are supported</span>
<span style="color:#2980b9">CPUAffinity</span> = <span style="color:#3daee9">%I</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">CPUAffinity</span> = numa-x
<span style="color:#7a7c7d"># no multiple "numa"</span>
<span style="color:#2980b9">CPUAffinity</span> = <span style="color:#27aeae;font-weight:bold">numa</span> numa
<span style="color:#7a7c7d"># no CPU index list and "numa"</span>
<span style="color:#2980b9">CPUAffinity</span> = <span style="color:#27aeae;font-weight:bold">numa</span> 0 1 2
<span style="color:#2980b9">CPUAffinity</span> = <span style="color:#f67400">0</span> <span style="color:#f67400">1</span> <span style="color:#f67400">2</span> numa
<span style="color:#7a7c7d">###### cpu feature</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">abm</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">adx</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">aes</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">apic</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">avx</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">avx2</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">bmi1</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">bmi2</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">clflush</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">cmov</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">constant_tsc</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">cx16</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">cx8</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">de</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">f16c</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">fma3</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">fpu</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">fxsr</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">ht</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">lahf_lm</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">lm</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">mca</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">mce</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">mmx</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">monitor</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">movbe</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">msr</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">mtrr</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">osxsave</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">pae</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">pat</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">pclmul</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">pge</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">pni</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">popcnt</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">pse</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">pse36</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">rdrand</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">rdseed</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">rdtscp</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">sep</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">sha_ni</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">sse</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">sse2</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">sse4_1</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">sse4_2</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">ssse3</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">syscall</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">tsc</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">vme</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">xsave</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ConditionCPUFeature</span> = <span style="color:#27aeae;font-weight:bold">tsc</span> mmx
<span style="color:#7a7c7d">###### cpu index list</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">NUMAMask</span> = <span style="color:#f67400">0</span> <span style="color:#f67400">1</span> <span style="color:#f67400">2</span>
<span style="color:#2980b9">NUMAMask</span> = <span style="color:#f67400">0</span>,<span style="color:#f67400">1</span>, <span style="color:#f67400">2</span>
<span style="color:#7a7c7d"># using ranges</span>
<span style="color:#2980b9">NUMAMask</span> = <span style="color:#f67400">0-2</span>
<span style="color:#2980b9">NUMAMask</span> = <span style="color:#f67400">0 - 2</span>
<span style="color:#2980b9">NUMAMask</span> = <span style="color:#f67400">0</span> <span style="color:#f67400">1</span>, <span style="color:#f67400">2</span> , <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#f67400">3</span>, <span style="color:#f67400">4-8</span> ,
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">NUMAMask</span> = <span style="color:#f67400">0</span> invalid <span style="color:#f67400">2</span>, <span style="color:#f67400">3</span>;<span style="color:#f67400">4</span>
<span style="color:#2980b9">NUMAMask</span> = <span style="color:#f67400">0</span>-a1
<span style="color:#2980b9">NUMAMask</span> = numa
<span style="color:#7a7c7d">###### cpu scheduling policy</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">CPUSchedulingPolicy</span> = <span style="color:#27aeae;font-weight:bold">batch</span>
<span style="color:#2980b9">CPUSchedulingPolicy</span> = <span style="color:#27aeae;font-weight:bold">fifo</span>
<span style="color:#2980b9">CPUSchedulingPolicy</span> = <span style="color:#27aeae;font-weight:bold">idle</span>
<span style="color:#2980b9">CPUSchedulingPolicy</span> = <span style="color:#27aeae;font-weight:bold">other</span>
<span style="color:#2980b9">CPUSchedulingPolicy</span> = <span style="color:#27aeae;font-weight:bold">rr</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">CPUSchedulingPolicy</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">CPUSchedulingPolicy</span> = <span style="color:#27aeae;font-weight:bold">batch</span> fifo
<span style="color:#7a7c7d">###### cpu scheduling priority</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">CPUSchedulingPriority</span> = <span style="color:#f67400">12</span>
<span style="color:#2980b9">CPUSchedulingPriority</span> = <span style="color:#f67400">99</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">CPUSchedulingPriority</span> = invalid
<span style="color:#2980b9">CPUSchedulingPriority</span> = -<span style="color:#f67400">12</span>
<span style="color:#2980b9">CPUSchedulingPriority</span> = 0.<span style="color:#f67400">12</span>
<span style="color:#7a7c7d"># out of range</span>
<span style="color:#2980b9">CPUSchedulingPriority</span> = 0
<span style="color:#2980b9">CPUSchedulingPriority</span> = 100
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">CPUSchedulingPriority</span> = <span style="color:#f67400">12</span> 34
<span style="color:#7a7c7d">###### cpu weight</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">CPUWeight</span> = <span style="color:#27aeae;font-weight:bold">idle</span>
<span style="color:#7a7c7d"># integer 1..10000</span>
<span style="color:#2980b9">CPUWeight</span> = <span style="color:#f67400">1</span>
<span style="color:#2980b9">CPUWeight</span> = <span style="color:#f67400">12</span>
<span style="color:#2980b9">CPUWeight</span> = <span style="color:#f67400">123</span>
<span style="color:#2980b9">CPUWeight</span> = <span style="color:#f67400">1234</span>
<span style="color:#2980b9">CPUWeight</span> = <span style="color:#f67400">1234</span>
<span style="color:#2980b9">CPUWeight</span> = <span style="color:#f67400">10000</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">CPUWeight</span> = -<span style="color:#f67400">1</span>
<span style="color:#2980b9">CPUWeight</span> = 0
<span style="color:#2980b9">CPUWeight</span> = 1000<span style="color:#f67400">1</span>
<span style="color:#2980b9">CPUWeight</span> = 1<span style="color:#f67400">2345</span>
<span style="color:#2980b9">CPUWeight</span> = 12.<span style="color:#f67400">3</span>
<span style="color:#2980b9">CPUWeight</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">CPUWeight</span> = 1 <span style="color:#f67400">10000</span>
<span style="color:#7a7c7d">###### delegate</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#7a7c7d"># single boolean</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#7a7c7d"># single controller</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">blkio</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">bpf-devices</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">bpf-firewall</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">cpu</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">cpuacct</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">cpuset</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">devices</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">io</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">memory</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">pids</span>
<span style="color:#7a7c7d"># multiple controllers</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">cpu</span> <span style="color:#27aeae;font-weight:bold">io</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">memory</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">Delegate</span> = i<span style="color:#27aeae;font-weight:bold">n</span>valid
<span style="color:#7a7c7d"># multiple boolean values</span>
<span style="color:#2980b9">Delegate</span> = <span style="color:#27aeae;font-weight:bold">on</span> off
<span style="color:#7a7c7d">###### device cardinal KMGT</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">123</span>
<span style="color:#2980b9">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">12</span><span style="font-style:italic">K</span>
<span style="color:#2980b9">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">12</span><span style="font-style:italic">M</span>
<span style="color:#2980b9">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">12</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">12</span><span style="font-style:italic">T</span>
<span style="color:#2980b9">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">12 </span><span style="font-style:italic">G</span>
<span style="color:#2980b9">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#f67400">10</span><span style="font-style:italic">M</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">20</span>%
<span style="color:#7a7c7d"># invalid multiplier suffix</span>
<span style="color:#2980b9">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">12</span>g
<span style="color:#2980b9">IOReadIOPSMax</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">12</span>E
<span style="color:#7a7c7d"># no device</span>
<span style="color:#2980b9">IOReadIOPSMax</span> = 10
<span style="color:#2980b9">IOReadIOPSMax</span> = 10M
<span style="color:#7a7c7d">###### device policy</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">DevicePolicy</span> = <span style="color:#27aeae;font-weight:bold">auto</span>
<span style="color:#2980b9">DevicePolicy</span> = <span style="color:#27aeae;font-weight:bold">closed</span>
<span style="color:#2980b9">DevicePolicy</span> = <span style="color:#27aeae;font-weight:bold">strict</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">DevicePolicy</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">DevicePolicy</span> = <span style="color:#27aeae;font-weight:bold">auto</span> closed
<span style="color:#7a7c7d">###### device time span</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">IODeviceLatencyTargetSec</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">123</span>
<span style="color:#2980b9">IODeviceLatencyTargetSec</span> = /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0 <span style="color:#f67400">5</span><span style="font-style:italic">s</span> <span style="color:#f67400">20</span><span style="font-style:italic">ms</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#f67400">100</span><span style="font-style:italic">us</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#7a7c7d"># no device</span>
<span style="color:#2980b9">IODeviceLatencyTargetSec</span> = 123
<span style="color:#2980b9">IODeviceLatencyTargetSec</span> = 5s 20ms 100us
<span style="color:#7a7c7d">###### exec</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#7a7c7d"># specifier and environment variable</span>
<span style="color:#2980b9">ExecStart</span> = /some/cmd <span style="color:#3daee9">%u</span> arg <span style="color:#27aeae">$var1</span> inside<span style="color:#27aeae">${var2}</span>word <span style="color:#27aeae">${var3}</span> <span style="color:#27aeae">$var4</span>
<span style="color:#2980b9">ExecStart</span> = cmd1 <span style="color:#3daee9">%h</span> arg1_1 <span style="color:#27aeae">$var1</span>, cmd2 <span style="color:#3daee9">%u</span> arg2_1 <span style="color:#27aeae">$var2_1</span><span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae">$var2_2</span>
<span style="color:#7a7c7d"># escapes (not exactly the same as detected by HlCStringChar)</span>
<span style="color:#2980b9">ExecStart</span> = cmd \, <span style="color:#3daee9">\'</span> <span style="color:#3daee9">\"</span> \\ \a <span style="color:#3daee9">\b</span> <span style="color:#3daee9">\f</span> <span style="color:#3daee9">\n</span> <span style="color:#3daee9">\r</span> <span style="color:#3daee9">\s</span> <span style="color:#3daee9">\t</span> <span style="color:#3daee9">\v</span> <span style="color:#3daee9">\x0A</span> <span style="color:#3daee9">\012</span> <span style="color:#3daee9">\u1234</span> <span style="color:#3daee9">\U12abcdef</span>
<span style="color:#7a7c7d"># prefix</span>
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">@</span>/some/cmd arg "@!+-:"
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">-</span>/some/cmd-1 -option arg
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">:</span>/some/cmd arg
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">+</span>/some/cmd arg
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">!</span>/some/cmd arg
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">!!</span>/some/cmd arg
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">@:-!!</span>/some/cmd arg
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">@!!-:</span>/some/cmd arg
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">@:-+</span>/some/cmd arg
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#7a7c7d"># invalid prefix</span>
<span style="color:#2980b9">ExecStart</span> = @ /some/cmd arg
<span style="color:#2980b9">ExecStart</span> = @ -/some/cmd arg
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">+</span>!/some/cmd arg
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">!!</span>!/some/cmd arg
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">@</span>+@/some/cmd arg
<span style="color:#2980b9">ExecStart</span> = <span style="color:#da4453">@!!</span>+/some/cmd arg
<span style="color:#7a7c7d">###### exit status</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#f67400">75</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">ADDRESS_FAMILIES</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">APPARMOR</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">BPF</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">CACHE_DIRECTORY</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">CANTCREAT</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">CAPABILITIES</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">CGROUP</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">CHDIR</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">CHOWN</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">CHROOT</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">CONFIG</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">CONFIGURATION_DIRECTORY</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">CONFIRM</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">CPUAFFINITY</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">CREDENTIALS</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">DATAERR</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">EXCEPTION</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">EXEC</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">FAILURE</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">FDS</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">GROUP</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">INVALIDARGUMENT</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">IOERR</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">IOPRIO</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">KEYRING</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">LIMITS</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">LOGS_DIRECTORY</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">MEMORY</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NAMESPACE</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NETWORK</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NICE</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NOHOST</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NOINPUT</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NOPERM</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NOPERMISSION</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NOTCONFIGURED</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NOTIMPLEMENTED</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NOTINSTALLED</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NOTRUNNING</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NOUSER</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NO_NEW_PRIVILEGES</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">NUMA_POLICY</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">OOM_ADJUST</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">OSERR</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">OSFILE</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">PAM</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">PERSONALITY</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">PROTOCOL</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">RUNTIME_DIRECTORY</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">SECCOMP</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">SECUREBITS</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">SELINUX_CONTEXT</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">SETSCHEDULER</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">SETSID</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">SIGNAL_MASK</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">SMACK_PROCESS_LABEL</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">SOFTWARE</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">STATE_DIRECTORY</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">STDERR</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">STDIN</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">STDOUT</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">SUCCESS</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">TEMPFAIL</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">TIMERSLACK</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">UNAVAILABLE</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">USAGE</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">USER</span>
<span style="color:#7a7c7d"># using signals (see values for context "signal" for a complete list of values)</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">SIGABRT</span>
<span style="color:#2980b9">SuccessExitStatus</span> = <span style="color:#27aeae;font-weight:bold">ADDRESS_FAMILIES</span> <span style="color:#f67400">75</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#f67400">23</span> <span style="color:#27aeae;font-weight:bold">SIGHUP</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">SuccessExitStatus</span> = invalid
<span style="color:#2980b9">SuccessExitStatus</span> = -23
<span style="color:#7a7c7d">###### exit type</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">ExitType</span> = <span style="color:#27aeae;font-weight:bold">main</span>
<span style="color:#2980b9">ExitType</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ExitType</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ExitType</span> = <span style="color:#27aeae;font-weight:bold">main</span> cgroup
<span style="color:#7a7c7d">###### failure mode</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">TimeoutStartFailureMode</span> = <span style="color:#27aeae;font-weight:bold">abort</span>
<span style="color:#2980b9">TimeoutStartFailureMode</span> = <span style="color:#27aeae;font-weight:bold">kill</span>
<span style="color:#2980b9">TimeoutStartFailureMode</span> = <span style="color:#27aeae;font-weight:bold">terminate</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">TimeoutStartFailureMode</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">TimeoutStartFailureMode</span> = <span style="color:#27aeae;font-weight:bold">abort</span> kill
<span style="color:#7a7c7d">###### file mode</span>
<span style="font-weight:bold">[Automount]</span>
<span style="color:#2980b9">DirectoryMode</span> = <span style="color:#f67400">755</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">DirectoryMode</span> = invalid
<span style="color:#7a7c7d"># need octal digits</span>
<span style="color:#2980b9">DirectoryMode</span> = <span style="color:#f67400">075</span>8
<span style="color:#2980b9">DirectoryMode</span> = <span style="color:#f67400">075</span>A
<span style="color:#7a7c7d"># need 3 to 4 octal digits</span>
<span style="color:#2980b9">DirectoryMode</span> = 07
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">DirectoryMode</span> = <span style="color:#f67400">0755</span> 0755
<span style="color:#7a7c7d">###### firmware</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">ConditionFirmware</span> = <span style="color:#27aeae;font-weight:bold">uefi</span>
<span style="color:#2980b9">ConditionFirmware</span> = <span style="color:#27aeae;font-weight:bold">device-tree</span>
<span style="color:#2980b9">ConditionFirmware</span> = <span style="color:#27aeae;font-weight:bold">device-tree-compatible</span>(some-device-tree)
<span style="color:#2980b9">ConditionFirmware</span> = <span style="color:#27aeae;font-weight:bold">device-tree-compatible</span>( some-device-tree )
<span style="color:#2980b9">ConditionFirmware</span> = <span style="color:#27aeae;font-weight:bold">smbios-field</span>(board_name = "Custom Board")
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ConditionFirmware</span> = invalid
<span style="color:#2980b9">ConditionFirmware</span> = <span style="color:#27aeae;font-weight:bold">device-tree</span>-invalid
<span style="color:#7a7c7d"># missing argument</span>
<span style="color:#2980b9">ConditionFirmware</span> = <span style="color:#27aeae;font-weight:bold">device-tree</span>-compatible
<span style="color:#2980b9">ConditionFirmware</span> = <span style="color:#27aeae;font-weight:bold">device-tree</span>-compatible()
<span style="color:#2980b9">ConditionFirmware</span> = smbios-field
<span style="color:#2980b9">ConditionFirmware</span> = smbios-field()
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ConditionFirmware</span> = <span style="color:#27aeae;font-weight:bold">uefi</span> device-tree
<span style="color:#7a7c7d">###### fs set</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">RestrictFileSystems</span> = <span style="color:#27aeae;font-weight:bold">@auxiliary-api</span>
<span style="color:#2980b9">RestrictFileSystems</span> = <span style="color:#27aeae;font-weight:bold">@basic-api</span>
<span style="color:#2980b9">RestrictFileSystems</span> = <span style="color:#27aeae;font-weight:bold">@common-block</span>
<span style="color:#2980b9">RestrictFileSystems</span> = <span style="color:#27aeae;font-weight:bold">@historical-block</span>
<span style="color:#2980b9">RestrictFileSystems</span> = <span style="color:#27aeae;font-weight:bold">@known</span>
<span style="color:#2980b9">RestrictFileSystems</span> = <span style="color:#27aeae;font-weight:bold">@network</span>
<span style="color:#2980b9">RestrictFileSystems</span> = <span style="color:#27aeae;font-weight:bold">@privileged-api</span>
<span style="color:#2980b9">RestrictFileSystems</span> = <span style="color:#27aeae;font-weight:bold">@temporary</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">RestrictFileSystems</span> = invalid
<span style="color:#2980b9">RestrictFileSystems</span> = temporary
<span style="color:#7a7c7d">###### fs type</span>
<span style="color:#7a7c7d"># A selection of file system types to be used as `Type` in mount units.</span>
<span style="font-weight:bold">[Mount]</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">binfmt_misc</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">btrfs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">configfs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">debugfs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">devtmpfs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">efivarfs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">exfat</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">ext2</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">ext3</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">ext4</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">f2fs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">fuse</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">fusectl</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">gfs2</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">hugetlbfs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">iso9660</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">jfs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">mqueue</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">msdos</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">nfs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">nilfs2</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">ntfs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">ntfs3</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">ocfs2</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">overlay</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">proc</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">reiserfs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">tmpfs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">tracefs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">udf</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">vfat</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">virtiofs</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">xfs</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">Type</span> = invalid
<span style="color:#2980b9">Type</span> = invalid <span style="color:#27aeae;font-weight:bold">ext4</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">btrfs</span> ext4
<span style="color:#7a7c7d">###### fs type set list</span>
<span style="color:#7a7c7d">## list of fs type names and fs set names</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">RestrictFileSystems</span> = <span style="color:#27aeae;font-weight:bold">@auxiliary-api</span> <span style="color:#27aeae;font-weight:bold">btrfs</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">nfs</span> <span style="color:#27aeae;font-weight:bold">@temporary</span> unknown
<span style="color:#7a7c7d">###### group and user</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">User</span> = <span style="color:#f67400">0</span>
<span style="color:#2980b9">User</span> = <span style="color:#f67400">1000</span>
<span style="color:#2980b9">Group</span> = <span style="color:#f67400">100</span>
<span style="color:#2980b9">User</span> = some-name
<span style="color:#2980b9">Group</span> = some_name
<span style="color:#2980b9">User</span> = _some-name-1
<span style="color:#2980b9">User</span> = name1
<span style="color:#7a7c7d"># using specifiers</span>
<span style="color:#2980b9">User</span> = <span style="color:#3daee9">%i</span>
<span style="color:#2980b9">User</span> = name-<span style="color:#3daee9">%i</span>
<span style="color:#2980b9">User</span> = some-<span style="color:#3daee9">%i</span>-name
<span style="color:#2980b9">User</span> = <span style="color:#3daee9">%U</span>-name
<span style="color:#2980b9">User</span> = some-<span style="color:#3daee9">%i</span>-name-<span style="color:#3daee9">%U</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#7a7c7d"># no negative integers</span>
<span style="color:#2980b9">User</span> = -1000
<span style="color:#7a7c7d"># no float</span>
<span style="color:#2980b9">User</span> = <span style="color:#f67400">100</span>.0
<span style="color:#7a7c7d"># no name with leading digit</span>
<span style="color:#2980b9">User</span> = <span style="color:#f67400">1</span>name
<span style="color:#7a7c7d"># no name with leading hyphen</span>
<span style="color:#2980b9">User</span> = -name
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">User</span> = <span style="color:#f67400">1000</span> 1001
<span style="color:#7a7c7d">###### group list</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">SupplementaryGroups</span> = some-name <span style="color:#3daee9">%U</span> some<span style="color:#3daee9">%i</span>name <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#3daee9">%U</span>name <span style="color:#f67400">1001</span> name<span style="color:#3daee9">%U</span>
<span style="color:#7a7c7d">###### io scheduling class</span>
<span style="color:#7a7c7d"># see systemd.exec</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">IOSchedulingClass</span> = <span style="color:#f67400">0</span>
<span style="color:#2980b9">IOSchedulingClass</span> = <span style="color:#f67400">1</span>
<span style="color:#2980b9">IOSchedulingClass</span> = <span style="color:#f67400">2</span>
<span style="color:#2980b9">IOSchedulingClass</span> = <span style="color:#f67400">3</span>
<span style="color:#2980b9">IOSchedulingClass</span> = <span style="color:#27aeae;font-weight:bold">best-effort</span>
<span style="color:#2980b9">IOSchedulingClass</span> = <span style="color:#27aeae;font-weight:bold">idle</span>
<span style="color:#2980b9">IOSchedulingClass</span> = <span style="color:#27aeae;font-weight:bold">realtime</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">IOSchedulingClass</span> = invalid
<span style="color:#2980b9">IOSchedulingClass</span> = none
<span style="color:#2980b9">IOSchedulingClass</span> = 4
<span style="color:#2980b9">IOSchedulingClass</span> = <span style="color:#f67400">1</span>23
<span style="color:#2980b9">IOSchedulingClass</span> = -<span style="color:#f67400">1</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">IOSchedulingClass</span> = <span style="color:#f67400">1</span> idle
<span style="color:#2980b9">IOSchedulingClass</span> = <span style="color:#27aeae;font-weight:bold">idle</span> idle
<span style="color:#2980b9">IOSchedulingClass</span> = <span style="color:#27aeae;font-weight:bold">idle</span> 1
<span style="color:#7a7c7d">###### ip address list</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">IPAddressAllow</span> = <span style="color:#27aeae;font-weight:bold">any</span>
<span style="color:#2980b9">IPAddressAllow</span> = <span style="color:#27aeae;font-weight:bold">localhost</span>
<span style="color:#2980b9">IPAddressAllow</span> = <span style="color:#27aeae;font-weight:bold">link-local</span>
<span style="color:#2980b9">IPAddressDeny</span> = <span style="color:#27aeae;font-weight:bold">multicast</span>
<span style="color:#2980b9">IPAddressAllow</span> = <span style="color:#27aeae;font-weight:bold">localhost</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">multicast</span>
<span style="color:#2980b9">IPAddressAllow</span> = <span style="color:#f67400">127</span>.<span style="color:#f67400">0</span>.<span style="color:#f67400">0</span>.<span style="color:#f67400">0</span>/<span style="color:#f67400">8</span> ::<span style="color:#f67400">1</span>/<span style="color:#f67400">128</span> <span style="color:#f67400">169</span>.<span style="color:#f67400">254</span>.<span style="color:#f67400">0</span>.<span style="color:#f67400">0</span>/<span style="color:#f67400">16</span> <span style="color:#f67400">fe80</span>::/<span style="color:#f67400">64</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">IPAddressAllow</span> = inv<span style="color:#f67400">a</span>li<span style="color:#f67400">d</span>
<span style="color:#7a7c7d">###### ip bind</span>
<span style="font-weight:bold">[Socket]</span>
<span style="color:#2980b9">BindIPv6Only</span> = <span style="color:#27aeae;font-weight:bold">both</span>
<span style="color:#2980b9">BindIPv6Only</span> = <span style="color:#27aeae;font-weight:bold">default</span>
<span style="color:#2980b9">BindIPv6Only</span> = <span style="color:#27aeae;font-weight:bold">ipv6-only</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">BindIPv6Only</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">BindIPv6Only</span> = <span style="color:#27aeae;font-weight:bold">both</span> default
<span style="color:#7a7c7d">###### io scheduling priority</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">IOSchedulingPriority</span> = <span style="color:#f67400">0</span>
<span style="color:#2980b9">IOSchedulingPriority</span> = <span style="color:#f67400">1</span>
<span style="color:#2980b9">IOSchedulingPriority</span> = <span style="color:#f67400">2</span>
<span style="color:#2980b9">IOSchedulingPriority</span> = <span style="color:#f67400">3</span>
<span style="color:#2980b9">IOSchedulingPriority</span> = <span style="color:#f67400">4</span>
<span style="color:#2980b9">IOSchedulingPriority</span> = <span style="color:#f67400">5</span>
<span style="color:#2980b9">IOSchedulingPriority</span> = <span style="color:#f67400">6</span>
<span style="color:#2980b9">IOSchedulingPriority</span> = <span style="color:#f67400">7</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">IOSchedulingPriority</span> = 8
<span style="color:#2980b9">IOSchedulingPriority</span> = <span style="color:#f67400">1</span>23
<span style="color:#2980b9">IOSchedulingPriority</span> = -<span style="color:#f67400">1</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">IOSchedulingPriority</span> = <span style="color:#f67400">0</span> 3
<span style="color:#7a7c7d">###### ip tos (terms-of-service)</span>
<span style="font-weight:bold">[Socket]</span>
<span style="color:#2980b9">IPTOS</span> = <span style="color:#f67400">15</span>
<span style="color:#2980b9">IPTOS</span> = <span style="color:#27aeae;font-weight:bold">low-cost</span>
<span style="color:#2980b9">IPTOS</span> = <span style="color:#27aeae;font-weight:bold">low-delay</span>
<span style="color:#2980b9">IPTOS</span> = <span style="color:#27aeae;font-weight:bold">reliability</span>
<span style="color:#2980b9">IPTOS</span> = <span style="color:#27aeae;font-weight:bold">throughput</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">IPTOS</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">IPTOS</span> = <span style="color:#f67400">15</span> 20
<span style="color:#2980b9">IPTOS</span> = <span style="color:#27aeae;font-weight:bold">low-delay</span> 15
<span style="color:#7a7c7d">###### keyring mode</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">KeyringMode</span> = <span style="color:#27aeae;font-weight:bold">inherit</span>
<span style="color:#2980b9">KeyringMode</span> = <span style="color:#27aeae;font-weight:bold">private</span>
<span style="color:#2980b9">KeyringMode</span> = <span style="color:#27aeae;font-weight:bold">shared</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">KeyringMode</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">KeyringMode</span> = <span style="color:#27aeae;font-weight:bold">shared</span> private
<span style="color:#7a7c7d">###### kill mode</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">KillMode</span> = <span style="color:#27aeae;font-weight:bold">control-group</span>
<span style="color:#2980b9">KillMode</span> = <span style="color:#27aeae;font-weight:bold">mixed</span>
<span style="color:#2980b9">KillMode</span> = <span style="color:#27aeae;font-weight:bold">none</span>
<span style="color:#2980b9">KillMode</span> = <span style="color:#27aeae;font-weight:bold">process</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">KillMode</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">KillMode</span> = <span style="color:#27aeae;font-weight:bold">mixed</span> process
<span style="color:#7a7c7d">###### limit bytes</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">123</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span><span style="font-style:italic">K</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span><span style="font-style:italic">M</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span><span style="font-style:italic">T</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span><span style="font-style:italic">P</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span><span style="font-style:italic">E</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span> <span style="font-style:italic">G</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span><span style="font-style:italic">G</span>:<span style="color:#f67400">24</span><span style="font-style:italic">G</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span> <span style="font-style:italic">G</span>:<span style="color:#f67400">24</span> <span style="font-style:italic">G</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span> <span style="font-style:italic">G</span>: <span style="color:#f67400">24</span> <span style="font-style:italic">G</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span> <span style="font-style:italic">G</span> :<span style="color:#f67400">24</span> <span style="font-style:italic">G</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span> <span style="font-style:italic">G</span> : <span style="color:#f67400">24</span> <span style="font-style:italic">G</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">LimitFSIZE</span> = invalid
<span style="color:#7a7c7d"># invalid bytes suffix</span>
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span>g
<span style="color:#2980b9">LimitFSIZE</span> = <span style="color:#f67400">12</span>H
<span style="color:#7a7c7d">###### limit nice level</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">-1</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">-12</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">-20</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">+1</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">+12</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">+19</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">0</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">9</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">12</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">23</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">34</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">40</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">-10</span>:<span style="color:#f67400">+10</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">20</span>:<span style="color:#f67400">30</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">LimitNICE</span> = invalid
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">0</span>.<span style="color:#f67400">2</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#f67400">20</span> : <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#2980b9">LimitNICE</span> = <span style="color:#27aeae;font-weight:bold">infinity</span> : 20
<span style="color:#7a7c7d"># out of range</span>
<span style="color:#2980b9">LimitNICE</span> = -<span style="color:#f67400">21</span>
<span style="color:#2980b9">LimitNICE</span> = -123
<span style="color:#2980b9">LimitNICE</span> = +<span style="color:#f67400">20</span>
<span style="color:#2980b9">LimitNICE</span> = +123
<span style="color:#2980b9">LimitNICE</span> = 41
<span style="color:#2980b9">LimitNICE</span> = 123
<span style="color:#7a7c7d">###### limit number</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">LimitNOFILE</span> = <span style="color:#f67400">123</span>
<span style="color:#2980b9">LimitNOFILE</span> = <span style="color:#f67400">123</span>:<span style="color:#f67400">321</span>
<span style="color:#2980b9">LimitNOFILE</span> = <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">LimitNOFILE</span> = invalid
<span style="color:#7a7c7d"># negative values</span>
<span style="color:#2980b9">LimitNOFILE</span> = -123
<span style="color:#7a7c7d">###### limit time span</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">LimitCPU</span> = <span style="color:#f67400">15</span><span style="font-style:italic">s</span> <span style="color:#f67400">10</span><span style="font-style:italic">us</span> : <span style="color:#f67400">20</span><span style="font-style:italic">s</span> <span style="color:#f67400">5</span><span style="font-style:italic">ms</span>
<span style="color:#2980b9">LimitCPU</span> = <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#7a7c7d"># only a single infinity</span>
<span style="color:#2980b9">LimitCPU</span> = <span style="color:#27aeae;font-weight:bold">infinity</span> : infinity
<span style="color:#2980b9">LimitCPU</span> = <span style="color:#27aeae;font-weight:bold">infinity</span> : 10s 15ms
<span style="color:#2980b9">LimitCPU</span> = <span style="color:#f67400">10</span><span style="font-style:italic">s</span> <span style="color:#f67400">15</span><span style="font-style:italic">ms</span> : <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#7a7c7d">###### log facility</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">auth</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">authpriv</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">cron</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">daemon</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">ftp</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">kern</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">local0</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">local1</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">local2</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">local3</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">local4</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">local5</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">local6</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">local7</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">lpr</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">mail</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">news</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">syslog</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">user</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">uucp</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">SyslogFacility</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">SyslogFacility</span> = <span style="color:#27aeae;font-weight:bold">cron</span> daemon
<span style="color:#7a7c7d">###### log level</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">LogLevelMax</span> = <span style="color:#27aeae;font-weight:bold">alert</span>
<span style="color:#2980b9">LogLevelMax</span> = <span style="color:#27aeae;font-weight:bold">crit</span>
<span style="color:#2980b9">LogLevelMax</span> = <span style="color:#27aeae;font-weight:bold">debug</span>
<span style="color:#2980b9">LogLevelMax</span> = <span style="color:#27aeae;font-weight:bold">emerg</span>
<span style="color:#2980b9">LogLevelMax</span> = <span style="color:#27aeae;font-weight:bold">err</span>
<span style="color:#2980b9">LogLevelMax</span> = <span style="color:#27aeae;font-weight:bold">info</span>
<span style="color:#2980b9">LogLevelMax</span> = <span style="color:#27aeae;font-weight:bold">notice</span>
<span style="color:#2980b9">LogLevelMax</span> = <span style="color:#27aeae;font-weight:bold">warning</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">LogLevelMax</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">LogLevelMax</span> = <span style="color:#27aeae;font-weight:bold">info</span> notice
<span style="color:#7a7c7d">###### memory mapping</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">all</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">default</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">private-anonymous</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">shared-anonymous</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">private-file-backed</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">shared-file-backed</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">elf-headers</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">private-huge</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">shared-huge</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">private-dax</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">shared-dax</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">private-file-backed</span> <span style="color:#27aeae;font-weight:bold">shared-dax</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">CoredumpFilter</span> = invalid
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">private-file-backed</span> invalid <span style="color:#27aeae;font-weight:bold">elf-headers</span>
<span style="color:#2980b9">CoredumpFilter</span> = invalid <span style="color:#27aeae;font-weight:bold">shared-dax</span>
<span style="color:#7a7c7d"># only spaces as separator</span>
<span style="color:#2980b9">CoredumpFilter</span> = <span style="color:#27aeae;font-weight:bold">private-file-backed</span>, <span style="color:#27aeae;font-weight:bold">shared-dax</span>
<span style="color:#7a7c7d">###### memory pressure watch</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = <span style="color:#27aeae;font-weight:bold">auto</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = <span style="color:#27aeae;font-weight:bold">skip</span>
<span style="color:#7a7c7d">## should accept any boolean value</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = <span style="color:#27aeae;font-weight:bold">on</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = <span style="color:#27aeae;font-weight:bold">1</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = <span style="color:#27aeae;font-weight:bold">off</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = <span style="color:#27aeae;font-weight:bold">0</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = i<span style="color:#27aeae;font-weight:bold">n</span>valid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">MemoryPressureWatch</span> = <span style="color:#27aeae;font-weight:bold">auto</span> skip
<span style="color:#7a7c7d">###### mount flag</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">MountFlags</span> = <span style="color:#27aeae;font-weight:bold">private</span>
<span style="color:#2980b9">MountFlags</span> = <span style="color:#27aeae;font-weight:bold">shared</span>
<span style="color:#2980b9">MountFlags</span> = <span style="color:#27aeae;font-weight:bold">slave</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">MountFlags</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">MountFlags</span> = <span style="color:#27aeae;font-weight:bold">shared</span> slave
<span style="color:#7a7c7d">###### nft set list</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">NFTSet</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span>:<span style="color:#27aeae;font-weight:bold">arp</span>::filter::my_service
<span style="color:#2980b9">NFTSet</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span>:<span style="color:#27aeae;font-weight:bold">bridge</span>::filter::my_service
<span style="color:#2980b9">NFTSet</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span>:<span style="color:#27aeae;font-weight:bold">inet</span>::filter::my_service
<span style="color:#2980b9">NFTSet</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span>:<span style="color:#27aeae;font-weight:bold">ip</span>::filter::my_service
<span style="color:#2980b9">NFTSet</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span>:<span style="color:#27aeae;font-weight:bold">ip6</span>::filter::my_service
<span style="color:#2980b9">NFTSet</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span>:<span style="color:#27aeae;font-weight:bold">ip</span>::filter::my_service
<span style="color:#2980b9">NFTSet</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span>:<span style="color:#27aeae;font-weight:bold">netdev</span>::filter::my_service
<span style="color:#2980b9">NFTSet</span> = <span style="color:#27aeae;font-weight:bold">group</span>:<span style="color:#27aeae;font-weight:bold">inet</span>::filter::my_service
<span style="color:#2980b9">NFTSet</span> = <span style="color:#27aeae;font-weight:bold">user</span>:<span style="color:#27aeae;font-weight:bold">inet</span>::filter::my_service
<span style="color:#7a7c7d">## multiple sets</span>
<span style="color:#2980b9">NFTSet</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span>:<span style="color:#27aeae;font-weight:bold">inet</span>:filter:my_service <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">user</span>:<span style="color:#27aeae;font-weight:bold">inet</span>:filter:serviceuser
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">NFTSet</span> = invalid:inet::filter::my_service
<span style="color:#2980b9">NFTSet</span> = <span style="color:#27aeae;font-weight:bold">cgroup</span>::invalid::filter::my_service
<span style="color:#7a7c7d">###### nice level</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">-1</span>
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">-12</span>
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">-20</span>
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">+1</span>
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">+12</span>
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">+19</span>
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">0</span>
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">12</span>
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">19</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">Nice</span> = invalid
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">0</span>.2
<span style="color:#7a7c7d"># out of range</span>
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">-2</span>1
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">-12</span>3
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">+2</span>0
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">+12</span>3
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">2</span>0
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">3</span>0
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">12</span>3
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">Nice</span> = <span style="color:#f67400">12</span> 34
<span style="color:#7a7c7d">###### notify access</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">NotifyAccess</span> = <span style="color:#27aeae;font-weight:bold">all</span>
<span style="color:#2980b9">NotifyAccess</span> = <span style="color:#27aeae;font-weight:bold">exec</span>
<span style="color:#2980b9">NotifyAccess</span> = <span style="color:#27aeae;font-weight:bold">main</span>
<span style="color:#2980b9">NotifyAccess</span> = <span style="color:#27aeae;font-weight:bold">none</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">NotifyAccess</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">NotifyAccess</span> = <span style="color:#27aeae;font-weight:bold">exec</span> none
<span style="color:#7a7c7d">###### numa mask</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">NUMAMask</span> = <span style="color:#27aeae;font-weight:bold">all</span>
<span style="color:#2980b9">NUMAMask</span> = <span style="color:#f67400">1</span>,<span style="color:#f67400">2</span>,<span style="color:#f67400">3-8</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">NUMAMask</span> = invalid
<span style="color:#7a7c7d"># both all and cpu index list</span>
<span style="color:#2980b9">NUMAMask</span> = <span style="color:#27aeae;font-weight:bold">all</span>, 1,2,3-8
<span style="color:#2980b9">NUMAMask</span> = <span style="color:#f67400">1</span>,<span style="color:#f67400">2</span>,<span style="color:#f67400">3-8</span>, all
<span style="color:#7a7c7d">###### numa policy</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">NUMAPolicy</span> = <span style="color:#27aeae;font-weight:bold">bind</span>
<span style="color:#2980b9">NUMAPolicy</span> = <span style="color:#27aeae;font-weight:bold">default</span>
<span style="color:#2980b9">NUMAPolicy</span> = <span style="color:#27aeae;font-weight:bold">interleave</span>
<span style="color:#2980b9">NUMAPolicy</span> = <span style="color:#27aeae;font-weight:bold">local</span>
<span style="color:#2980b9">NUMAPolicy</span> = <span style="color:#27aeae;font-weight:bold">preferred</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">NUMAPolicy</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">NUMAPolicy</span> = <span style="color:#27aeae;font-weight:bold">interleave</span> local
<span style="color:#7a7c7d">###### on failure job mode</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">OnFailureJobMode</span> = <span style="color:#27aeae;font-weight:bold">fail</span>
<span style="color:#2980b9">OnFailureJobMode</span> = <span style="color:#27aeae;font-weight:bold">flush</span>
<span style="color:#2980b9">OnFailureJobMode</span> = <span style="color:#27aeae;font-weight:bold">ignore-dependencies</span>
<span style="color:#2980b9">OnFailureJobMode</span> = <span style="color:#27aeae;font-weight:bold">ignore-requirements</span>
<span style="color:#2980b9">OnFailureJobMode</span> = <span style="color:#27aeae;font-weight:bold">isolate</span>
<span style="color:#2980b9">OnFailureJobMode</span> = <span style="color:#27aeae;font-weight:bold">replace</span>
<span style="color:#2980b9">OnFailureJobMode</span> = <span style="color:#27aeae;font-weight:bold">replace-irreversibly</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">OnFailureJobMode</span> = invalid
<span style="color:#2980b9">OnFailureJobMode</span> = invalid <span style="color:#27aeae;font-weight:bold">fail</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">OnFailureJobMode</span> = <span style="color:#27aeae;font-weight:bold">replace</span> fail
<span style="color:#7a7c7d">###### oom behavior (out-of-memory killer behavior)</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">ManagedOOMSwap</span> = <span style="color:#27aeae;font-weight:bold">auto</span>
<span style="color:#2980b9">ManagedOOMSwap</span> = <span style="color:#27aeae;font-weight:bold">kill</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ManagedOOMSwap</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ManagedOOMSwap</span> = <span style="color:#27aeae;font-weight:bold">auto</span> kill
<span style="color:#7a7c7d">###### oom preference (out-of-memory killer preference)</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">ManagedOOMPreference</span> = <span style="color:#27aeae;font-weight:bold">avoid</span>
<span style="color:#2980b9">ManagedOOMPreference</span> = <span style="color:#27aeae;font-weight:bold">none</span>
<span style="color:#2980b9">ManagedOOMPreference</span> = <span style="color:#27aeae;font-weight:bold">omit</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ManagedOOMPreference</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ManagedOOMPreference</span> = <span style="color:#27aeae;font-weight:bold">avoid</span> none
<span style="color:#7a7c7d">###### oom policy (out-of-memory killer policy)</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">OOMPolicy</span> = <span style="color:#27aeae;font-weight:bold">continue</span>
<span style="color:#2980b9">OOMPolicy</span> = <span style="color:#27aeae;font-weight:bold">kill</span>
<span style="color:#2980b9">OOMPolicy</span> = <span style="color:#27aeae;font-weight:bold">stop</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">OOMPolicy</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">OOMPolicy</span> = <span style="color:#27aeae;font-weight:bold">kill</span> stop
<span style="color:#7a7c7d">###### oom score adjust (out-of-memory killer score adjustment)</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">OOMScoreAdjust</span> = <span style="color:#f67400">-1000</span>
<span style="color:#2980b9">OOMScoreAdjust</span> = <span style="color:#f67400">-123</span>
<span style="color:#2980b9">OOMScoreAdjust</span> = <span style="color:#f67400">0</span>
<span style="color:#2980b9">OOMScoreAdjust</span> = <span style="color:#f67400">321</span>
<span style="color:#2980b9">OOMScoreAdjust</span> = <span style="color:#f67400">+321</span>
<span style="color:#2980b9">OOMScoreAdjust</span> = <span style="color:#f67400">+1000</span>
<span style="color:#2980b9">OOMScoreAdjust</span> = <span style="color:#f67400">1000</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">OOMScoreAdjust</span> = invalid
<span style="color:#2980b9">OOMScoreAdjust</span> = <span style="color:#f67400">1</span>.2
<span style="color:#7a7c7d"># out of range</span>
<span style="color:#2980b9">OOMScoreAdjust</span> = <span style="color:#f67400">-100</span>1
<span style="color:#2980b9">OOMScoreAdjust</span> = <span style="color:#f67400">+100</span>1
<span style="color:#2980b9">OOMScoreAdjust</span> = <span style="color:#f67400">100</span>1
<span style="color:#7a7c7d">###### open file option</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">OpenFile</span> = /some/path/<span style="color:#da4453">:</span><span style="font-style:italic">some-name</span><span style="color:#da4453">:</span><span style="color:#27aeae;font-weight:bold">append</span>,<span style="color:#27aeae;font-weight:bold">graceful</span>,<span style="color:#27aeae;font-weight:bold">read-only</span>,<span style="color:#27aeae;font-weight:bold">truncate</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">OpenFile</span> = /some/path/<span style="color:#da4453">:</span><span style="font-style:italic">some-name</span><span style="color:#da4453">:</span>some,invalid,options
<span style="color:#7a7c7d">###### percent</span>
<span style="font-weight:bold">[Slice]</span>
<span style="color:#2980b9">CPUQuota</span> = <span style="color:#f67400">0.1</span><span style="font-style:italic">%</span>
<span style="color:#2980b9">CPUQuota</span> = <span style="color:#f67400">12</span> <span style="font-style:italic">%</span>
<span style="color:#2980b9">CPUQuota</span> = <span style="color:#f67400">123.4</span><span style="font-style:italic">%</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">CPUQuota</span> = 10
<span style="color:#2980b9">CPUQuota</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">CPUQuota</span> = <span style="color:#f67400">10</span><span style="font-style:italic">%</span> 20%
<span style="color:#7a7c7d">###### personality</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">arm</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">arm-be</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">arm64</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">arm64-be</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">ppc</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">ppc-le</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">ppc64</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">ppc64-le</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">s390</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">s390x</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">x86</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">x86-64</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">Personality</span> = invalid
<span style="color:#2980b9">Personality</span> = alpha
<span style="color:#2980b9">Personality</span> = m68k
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">Personality</span> = <span style="color:#27aeae;font-weight:bold">x86-64</span> s390x
<span style="color:#7a7c7d">###### private tmp</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">PrivateTmp</span> = <span style="color:#27aeae;font-weight:bold">disconnected</span>
<span style="color:#7a7c7d">## should accept any boolean value</span>
<span style="color:#2980b9">PrivateTmp</span> = <span style="color:#27aeae;font-weight:bold">on</span>
<span style="color:#2980b9">PrivateTmp</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">PrivateTmp</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">PrivateTmp</span> = <span style="color:#27aeae;font-weight:bold">1</span>
<span style="color:#2980b9">PrivateTmp</span> = <span style="color:#27aeae;font-weight:bold">off</span>
<span style="color:#2980b9">PrivateTmp</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">PrivateTmp</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">PrivateTmp</span> = <span style="color:#27aeae;font-weight:bold">0</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">PrivateTmp</span> = i<span style="color:#27aeae;font-weight:bold">n</span>valid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">PrivateTmp</span> = <span style="color:#27aeae;font-weight:bold">disconnected</span> true
<span style="color:#7a7c7d">###### private users</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">PrivateUsers</span> = <span style="color:#27aeae;font-weight:bold">identity</span>
<span style="color:#2980b9">PrivateUsers</span> = <span style="color:#27aeae;font-weight:bold">self</span>
<span style="color:#7a7c7d">## should accept any boolean value</span>
<span style="color:#2980b9">PrivateUsers</span> = <span style="color:#27aeae;font-weight:bold">on</span>
<span style="color:#2980b9">PrivateUsers</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">PrivateUsers</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">PrivateUsers</span> = <span style="color:#27aeae;font-weight:bold">1</span>
<span style="color:#2980b9">PrivateUsers</span> = <span style="color:#27aeae;font-weight:bold">off</span>
<span style="color:#2980b9">PrivateUsers</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">PrivateUsers</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">PrivateUsers</span> = <span style="color:#27aeae;font-weight:bold">0</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">PrivateUsers</span> = i<span style="color:#27aeae;font-weight:bold">n</span>valid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">PrivateUsers</span> = <span style="color:#27aeae;font-weight:bold">identity</span> self
<span style="color:#7a7c7d">###### proc subset</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">ProcSubset</span> = <span style="color:#27aeae;font-weight:bold">all</span>
<span style="color:#2980b9">ProcSubset</span> = <span style="color:#27aeae;font-weight:bold">pid</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ProcSubset</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ProcSubset</span> = <span style="color:#27aeae;font-weight:bold">all</span> pid
<span style="color:#7a7c7d">###### protect control groups</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">private</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">strict</span>
<span style="color:#7a7c7d">## should accept any boolean value</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">on</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">1</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">off</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">0</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">private</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ProtectControlGroups</span> = <span style="color:#27aeae;font-weight:bold">private</span> strict
<span style="color:#7a7c7d">###### protect home</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">ProtectHome</span> = <span style="color:#27aeae;font-weight:bold">read-only</span>
<span style="color:#2980b9">ProtectHome</span> = <span style="color:#27aeae;font-weight:bold">tmpfs</span>
<span style="color:#2980b9">ProtectHome</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">ProtectHome</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">ProtectHome</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ProtectHome</span> = i<span style="color:#27aeae;font-weight:bold">n</span>valid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ProtectHome</span> = <span style="color:#27aeae;font-weight:bold">tmpfs</span> true
<span style="color:#7a7c7d">###### protect system</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">ProtectSystem</span> = <span style="color:#27aeae;font-weight:bold">full</span>
<span style="color:#2980b9">ProtectSystem</span> = <span style="color:#27aeae;font-weight:bold">strict</span>
<span style="color:#2980b9">ProtectSystem</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">ProtectSystem</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">ProtectSystem</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">ProtectSystem</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ProtectSystem</span> = i<span style="color:#27aeae;font-weight:bold">n</span>valid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ProtectSystem</span> = <span style="color:#27aeae;font-weight:bold">full</span> true
<span style="color:#7a7c7d">###### restart</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">Restart</span> = <span style="color:#27aeae;font-weight:bold">always</span>
<span style="color:#2980b9">Restart</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#2980b9">Restart</span> = <span style="color:#27aeae;font-weight:bold">on-abnormal</span>
<span style="color:#2980b9">Restart</span> = <span style="color:#27aeae;font-weight:bold">on-abort</span>
<span style="color:#2980b9">Restart</span> = <span style="color:#27aeae;font-weight:bold">on-failure</span>
<span style="color:#2980b9">Restart</span> = <span style="color:#27aeae;font-weight:bold">on-success</span>
<span style="color:#2980b9">Restart</span> = <span style="color:#27aeae;font-weight:bold">on-watchdog</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">Restart</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">Restart</span> = <span style="color:#27aeae;font-weight:bold">no</span> on-abort
<span style="color:#7a7c7d">###### restart mode</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">RestartMode</span> = <span style="color:#27aeae;font-weight:bold">debug</span>
<span style="color:#2980b9">RestartMode</span> = <span style="color:#27aeae;font-weight:bold">direct</span>
<span style="color:#2980b9">RestartMode</span> = <span style="color:#27aeae;font-weight:bold">normal</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">RestartMode</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">RestartMode</span> = <span style="color:#27aeae;font-weight:bold">direct</span> normal
<span style="color:#7a7c7d">###### runtime directory preserve</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">RuntimeDirectoryPreserve</span> = <span style="color:#27aeae;font-weight:bold">restart</span>
<span style="color:#2980b9">RuntimeDirectoryPreserve</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#2980b9">RuntimeDirectoryPreserve</span> = <span style="color:#27aeae;font-weight:bold">false</span>
<span style="color:#2980b9">RuntimeDirectoryPreserve</span> = <span style="color:#27aeae;font-weight:bold">yes</span>
<span style="color:#2980b9">RuntimeDirectoryPreserve</span> = <span style="color:#27aeae;font-weight:bold">no</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">RuntimeDirectoryPreserve</span> = i<span style="color:#27aeae;font-weight:bold">n</span>valid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">RuntimeDirectoryPreserve</span> = <span style="color:#27aeae;font-weight:bold">restart</span> no
<span style="color:#7a7c7d">###### secure bits list</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">SecureBits</span> = <span style="color:#27aeae;font-weight:bold">keep-caps</span>
<span style="color:#2980b9">SecureBits</span> = <span style="color:#27aeae;font-weight:bold">keep-caps-locked</span>
<span style="color:#2980b9">SecureBits</span> = <span style="color:#27aeae;font-weight:bold">no-setuid-fixup</span>
<span style="color:#2980b9">SecureBits</span> = <span style="color:#27aeae;font-weight:bold">no-setuid-fixup-locked</span>
<span style="color:#2980b9">SecureBits</span> = <span style="color:#27aeae;font-weight:bold">noroot</span>
<span style="color:#2980b9">SecureBits</span> = <span style="color:#27aeae;font-weight:bold">noroot-locked</span>
<span style="color:#2980b9">SecureBits</span> = <span style="color:#27aeae;font-weight:bold">keep-caps</span> <span style="color:#27aeae;font-weight:bold">noroot-locked</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">no-setuid-fixup</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">SecureBits</span> = invalid
<span style="color:#7a7c7d">###### security</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">ConditionSecurity</span> = <span style="color:#27aeae;font-weight:bold">apparmor</span>
<span style="color:#2980b9">ConditionSecurity</span> = <span style="color:#27aeae;font-weight:bold">audit</span>
<span style="color:#2980b9">ConditionSecurity</span> = <span style="color:#27aeae;font-weight:bold">ima</span>
<span style="color:#2980b9">ConditionSecurity</span> = <span style="color:#27aeae;font-weight:bold">measured-uki</span>
<span style="color:#2980b9">ConditionSecurity</span> = <span style="color:#27aeae;font-weight:bold">selinux</span>
<span style="color:#2980b9">ConditionSecurity</span> = <span style="color:#27aeae;font-weight:bold">smack</span>
<span style="color:#2980b9">ConditionSecurity</span> = <span style="color:#27aeae;font-weight:bold">tomoyo</span>
<span style="color:#2980b9">ConditionSecurity</span> = <span style="color:#27aeae;font-weight:bold">tpm2</span>
<span style="color:#2980b9">ConditionSecurity</span> = <span style="color:#27aeae;font-weight:bold">uefi-secureboot</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ConditionSecurity</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ConditionSecurity</span> = invalid <span style="color:#27aeae;font-weight:bold">selinux</span>
<span style="color:#2980b9">ConditionSecurity</span> = <span style="color:#27aeae;font-weight:bold">apparmor</span> selinux
<span style="color:#7a7c7d">###### service type</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">dbus</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">exec</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">forking</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">idle</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">notify</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">oneshot</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">simple</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">Type</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">Type</span> = <span style="color:#27aeae;font-weight:bold">exec</span> forking
<span style="color:#7a7c7d">###### signal</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGABRT</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGALRM</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGBUS</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGCHLD</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGCLD</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGCONT</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGEMT</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGFPE</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGHUP</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGILL</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGINFO</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGINT</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGIO</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGIOT</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGKILL</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGLOST</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGPIPE</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGPOLL</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGPROF</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGPWR</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGQUIT</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGSEGV</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGSTKFLT</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGSTOP</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGSYS</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGTERM</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGTRAP</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGTSTP</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGTTIN</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGTTOU</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGUNUSED</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGURG</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGUSR1</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGUSR2</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGVTALRM</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGWINCH</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGXCPU</span>
<span style="color:#2980b9">KillSignal</span> = <span style="color:#27aeae;font-weight:bold">SIGXFSZ</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">KillSignal</span> = SIG_INVALID
<span style="color:#7a7c7d">###### socket bind rule</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">SocketBindAllow</span> = <span style="color:#27aeae;font-weight:bold">any</span>
<span style="color:#2980b9">SocketBindAllow</span> = <span style="color:#27aeae;font-weight:bold">ipv4</span>:
<span style="color:#2980b9">SocketBindAllow</span> = <span style="color:#27aeae;font-weight:bold">ipv4</span>:<span style="color:#27aeae;font-weight:bold">tcp</span>:
<span style="color:#2980b9">SocketBindAllow</span> = <span style="color:#27aeae;font-weight:bold">ipv4</span>:<span style="color:#27aeae;font-weight:bold">tcp</span>:<span style="color:#f67400">12345</span>
<span style="color:#2980b9">SocketBindAllow</span> = <span style="color:#27aeae;font-weight:bold">ipv4</span>:<span style="color:#27aeae;font-weight:bold">tcp</span>:<span style="color:#f67400">1</span>-<span style="color:#f67400">123</span>
<span style="color:#2980b9">SocketBindAllow</span> = <span style="color:#27aeae;font-weight:bold">ipv6</span>:<span style="color:#27aeae;font-weight:bold">udp</span>:<span style="color:#f67400">1</span>-<span style="color:#f67400">123</span>
<span style="color:#2980b9">SocketBindAllow</span> = <span style="color:#27aeae;font-weight:bold">ipv6</span>: <span style="color:#27aeae;font-weight:bold">udp</span>: <span style="color:#f67400">1</span> - <span style="color:#f67400">123</span>
<span style="color:#2980b9">SocketBindAllow</span> = <span style="color:#27aeae;font-weight:bold">tcp</span>:
<span style="color:#2980b9">SocketBindAllow</span> = <span style="color:#f67400">12345</span>
<span style="color:#2980b9">SocketBindAllow</span> = <span style="color:#f67400">123</span>-<span style="color:#f67400">456</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">SocketBindAllow</span> = ipv4 :
<span style="color:#2980b9">SocketBindAllow</span> = ipv5:<span style="color:#27aeae;font-weight:bold">tcp</span>:
<span style="color:#2980b9">SocketBindAllow</span> = ipv4:udcp:
<span style="color:#2980b9">SocketBindAllow</span> = tcp:ipv<span style="color:#f67400">4</span>
<span style="color:#2980b9">SocketBindAllow</span> = <span style="color:#27aeae;font-weight:bold">ipv4</span>:<span style="color:#27aeae;font-weight:bold">tcp</span>: <span style="color:#f67400">12345</span>
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">SocketBindAllow</span> = <span style="color:#27aeae;font-weight:bold">any</span> ipv4:
<span style="color:#7a7c7d">###### socket protocol</span>
<span style="font-weight:bold">[Socket]</span>
<span style="color:#2980b9">SocketProtocol</span> = <span style="color:#27aeae;font-weight:bold">sctp</span>
<span style="color:#2980b9">SocketProtocol</span> = <span style="color:#27aeae;font-weight:bold">udplite</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">SocketProtocol</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">SocketProtocol</span> = <span style="color:#27aeae;font-weight:bold">sctp</span> udplite
<span style="color:#7a7c7d">###### standard input</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">StandardInput</span> = <span style="color:#27aeae;font-weight:bold">data</span>
<span style="color:#2980b9">StandardInput</span> = <span style="color:#27aeae;font-weight:bold">fd</span>
<span style="color:#2980b9">StandardInput</span> = <span style="color:#27aeae;font-weight:bold">fd:</span>some_name
<span style="color:#2980b9">StandardInput</span> = <span style="color:#27aeae;font-weight:bold">file:</span>/some/absolute/path
<span style="color:#2980b9">StandardInput</span> = <span style="color:#27aeae;font-weight:bold">null</span>
<span style="color:#2980b9">StandardInput</span> = <span style="color:#27aeae;font-weight:bold">socket</span>
<span style="color:#2980b9">StandardInput</span> = <span style="color:#27aeae;font-weight:bold">tty</span>
<span style="color:#2980b9">StandardInput</span> = <span style="color:#27aeae;font-weight:bold">tty-fail</span>
<span style="color:#2980b9">StandardInput</span> = <span style="color:#27aeae;font-weight:bold">tty-force</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">StandardInput</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">StandardInput</span> = <span style="color:#27aeae;font-weight:bold">null</span> tty
<span style="color:#2980b9">StandardInput</span> = <span style="color:#27aeae;font-weight:bold">file:</span>/some/absolute/path socket
<span style="color:#7a7c7d"># no absolute path immediately after `file:`</span>
<span style="color:#2980b9">StandardInput</span> = file:
<span style="color:#2980b9">StandardInput</span> = file:some//path
<span style="color:#2980b9">StandardInput</span> = file: /some/absolute/path
<span style="color:#7a7c7d">###### standard output</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#7a7c7d"># </span><span style="color:#81ca2d;background-color:#4d1f24;font-weight:bold">NOTE</span><span style="color:#7a7c7d">: Option StandardError accepts the same values.</span>
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">append:</span>/some/absolute/path
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">fd</span>
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">fd:</span>some_name
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">file:</span>/some/absolute/path
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">inherit</span>
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">journal</span>
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">journal+console</span>
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">kmsg</span>
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">kmsg+console</span>
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">null</span>
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">socket</span>
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">truncate:</span>/some/absolute/path
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">tty</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">StandardOutput</span> = invalid
<span style="color:#2980b9">StandardOutput</span> = syslog
<span style="color:#7a7c7d"># no absolute path immediately after append:, file:</span>
<span style="color:#2980b9">StandardOutput</span> = append:
<span style="color:#2980b9">StandardOutput</span> = append:some/relative/path
<span style="color:#2980b9">StandardOutput</span> = append: /some/relative/path
<span style="color:#2980b9">StandardOutput</span> = file:
<span style="color:#2980b9">StandardOutput</span> = file:some/relative/path
<span style="color:#2980b9">StandardOutput</span> = file: /some/relative/path
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">null</span> tty
<span style="color:#2980b9">StandardOutput</span> = <span style="color:#27aeae;font-weight:bold">file:</span>/some/absolute/path socket
<span style="color:#7a7c7d">###### system call architecture</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">SystemCallArchitectures</span> = <span style="color:#27aeae;font-weight:bold">mips64-le-n32</span>
<span style="color:#2980b9">SystemCallArchitectures</span> = <span style="color:#27aeae;font-weight:bold">mips64-n32</span>
<span style="color:#2980b9">SystemCallArchitectures</span> = <span style="color:#27aeae;font-weight:bold">native</span>
<span style="color:#2980b9">SystemCallArchitectures</span> = <span style="color:#27aeae;font-weight:bold">x32</span>
<span style="color:#7a7c7d"># all values from "architecture" are also valid</span>
<span style="color:#2980b9">SystemCallArchitectures</span> = <span style="color:#27aeae;font-weight:bold">alpha</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27aeae;font-weight:bold">mips</span> <span style="color:#27aeae;font-weight:bold">sparc</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">SystemCallArchitectures</span> = invalid
<span style="color:#7a7c7d">###### system call errno</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">kill</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">log</span>
<span style="color:#7a7c7d"># from man errno(3)</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EACCES</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EADDRINUSE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EADDRNOTAVAIL</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EAFNOSUPPORT</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EAGAIN</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EALREADY</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EBADE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EBADF</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EBADFD</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EBADMSG</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EBADR</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EBADRQC</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EBADSLT</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EBUSY</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ECANCELED</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ECHILD</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ECHRNG</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ECOMM</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ECONNABORTED</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ECONNREFUSED</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ECONNRESET</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EDEADLK</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EDEADLOCK</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EDESTADDRREQ</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EDOM</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EDQUOT</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EEXIST</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EFAULT</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EFBIG</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EHOSTDOWN</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EHOSTUNREACH</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EHWPOISON</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EIDRM</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EILSEQ</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EINPROGRESS</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EINTR</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EINVAL</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EIO</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EISCONN</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EISDIR</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EISNAM</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EKEYEXPIRED</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EKEYREJECTED</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EKEYREVOKED</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EL2HLT</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EL2NSYNC</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EL3HLT</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EL3RST</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ELIBACC</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ELIBBAD</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ELIBEXEC</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ELIBMAX</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ELIBSCN</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ELNRNG</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ELOOP</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EMEDIUMTYPE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EMFILE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EMLINK</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EMSGSIZE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EMULTIHOP</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENAMETOOLONG</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENETDOWN</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENETRESET</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENETUNREACH</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENFILE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOANO</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOBUFS</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENODATA</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENODEV</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOENT</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOEXEC</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOKEY</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOLCK</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOLINK</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOMEDIUM</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOMEM</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOMSG</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENONET</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOPKG</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOPROTOOPT</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOSPC</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOSR</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOSTR</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOSYS</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOTBLK</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOTCONN</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOTDIR</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOTEMPTY</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOTRECOVERABLE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOTSOCK</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOTSUP</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOTTY</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENOTUNIQ</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ENXIO</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EOPNOTSUPP</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EOVERFLOW</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EOWNERDEAD</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EPERM</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EPFNOSUPPORT</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EPIPE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EPROTO</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EPROTONOSUPPORT</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EPROTOTYPE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ERANGE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EREMCHG</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EREMOTE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EREMOTEIO</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ERESTART</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ERFKILL</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EROFS</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ESHUTDOWN</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ESOCKTNOSUPPORT</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ESPIPE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ESRCH</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ESTALE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ESTRPIPE</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ETIME</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ETIMEDOUT</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ETOOMANYREFS</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ETXTBSY</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EUCLEAN</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EUNATCH</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EUSERS</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EWOULDBLOCK</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EXDEV</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">EXFULL</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">1</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">12</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">123</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">1234</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">2</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">23</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">234</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">2345</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">3</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">34</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">345</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">3456</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">3999</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">4000</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">4009</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">4019</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">4089</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">4095</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = invalid
<span style="color:#2980b9">SystemCallErrorNumber</span> = -<span style="color:#f67400">12</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = 0.<span style="color:#f67400">12</span>
<span style="color:#7a7c7d"># out of range</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = 0
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">409</span>6
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">500</span>0
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#da4453">ESPIPE</span> EUCLEAN
<span style="color:#2980b9">SystemCallErrorNumber</span> = <span style="color:#f67400">123</span> EUCLEAN
<span style="color:#7a7c7d">###### time span</span>
<span style="font-weight:bold">[Timer]</span>
<span style="color:#7a7c7d"># without unit</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">15</span>
<span style="color:#7a7c7d"># micro second</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">123 </span><span style="font-style:italic">usec</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">123</span><span style="font-style:italic">us</span>
<span style="color:#7a7c7d"># using UTF-8 "Micro Sign" U+00B5 &amp;micro; &amp;#181; &amp;#xB5;</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">123 </span><span style="font-style:italic">µs</span>
<span style="color:#7a7c7d"># using UTF-8 "Greek Small Letter Mu" U+03BC &amp;mu; &amp;#956; &amp;#x3BC;</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">123 </span><span style="font-style:italic">μs</span>
<span style="color:#7a7c7d"># milli second</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">123 </span><span style="font-style:italic">msec</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">123</span><span style="font-style:italic">ms</span>
<span style="color:#7a7c7d"># second</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">74 </span><span style="font-style:italic">s</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">2</span><span style="font-style:italic">sec</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">12 </span><span style="font-style:italic">second</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">1 </span><span style="font-style:italic">seconds</span>
<span style="color:#7a7c7d"># minute</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">342 </span><span style="font-style:italic">m</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">2</span><span style="font-style:italic">min</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">7 </span><span style="font-style:italic">minute</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">1 </span><span style="font-style:italic">minutes</span>
<span style="color:#7a7c7d"># hour</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">2 </span><span style="font-style:italic">h</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">48 </span><span style="font-style:italic">hr</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">2</span><span style="font-style:italic">hour</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">2</span><span style="font-style:italic">hours</span>
<span style="color:#7a7c7d"># day</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">2 </span><span style="font-style:italic">d</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">1 </span><span style="font-style:italic">day</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">7 </span><span style="font-style:italic">days</span>
<span style="color:#7a7c7d"># week</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">2 </span><span style="font-style:italic">w</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">123 </span><span style="font-style:italic">week</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">0 </span><span style="font-style:italic">weeks</span>
<span style="color:#7a7c7d"># month</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">12 </span><span style="font-style:italic">M</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">7 </span><span style="font-style:italic">month</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">1 </span><span style="font-style:italic">months</span>
<span style="color:#7a7c7d"># year</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">y</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">123</span><span style="font-style:italic">year</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">12 </span><span style="font-style:italic">years</span>
<span style="color:#7a7c7d"># combined</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">55</span><span style="font-style:italic">s</span><span style="color:#f67400">500</span><span style="font-style:italic">ms</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">300</span><span style="font-style:italic">ms</span><span style="color:#f67400">20</span><span style="font-style:italic">s</span> <span style="color:#f67400">5</span><span style="font-style:italic">day</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">123 5 </span><span style="font-style:italic">days</span> <span style="color:#f67400">1</span><span style="font-style:italic">m</span> <span style="color:#f67400">12 1</span><span style="font-style:italic">sec</span> <span style="color:#f67400">123 </span><span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#f67400">23 </span><span style="font-style:italic">msec</span> <span style="color:#f67400">13 1</span><span style="font-style:italic">us</span>
<span style="color:#7a7c7d"># multiple hours</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">7</span><span style="font-style:italic">hr</span> <span style="color:#f67400">2</span><span style="font-style:italic">hr</span> <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#f67400">1</span><span style="font-style:italic">d</span> <span style="color:#f67400">2</span><span style="font-style:italic">w</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#7a7c7d"># mi is invalid</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">1</span><span style="font-style:italic">m</span>i
<span style="color:#7a7c7d"># hs is invalid</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">2</span><span style="font-style:italic">h</span>s
<span style="color:#7a7c7d"># ds is invalid</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">7 </span><span style="font-style:italic">d</span>s <span style="color:#f67400">1</span><span style="font-style:italic">y</span>
<span style="color:#7a7c7d"># unit without amount</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">12 </span><span style="font-style:italic">min</span> sec
<span style="color:#2980b9">OnBootSec</span> = min <span style="color:#f67400">1 </span><span style="font-style:italic">sec</span>
<span style="color:#7a7c7d"># invalid unit</span>
<span style="color:#2980b9">OnBootSec</span> = <span style="color:#f67400">12</span>foo <span style="color:#f67400">1 </span>bar
<span style="color:#7a7c7d">###### timeout</span>
<span style="color:#7a7c7d"># all values from time span are valid</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">JobTimeoutSec</span> = <span style="color:#f67400">0</span>
<span style="color:#2980b9">JobTimeoutSec</span> = <span style="color:#f67400">12345</span>
<span style="color:#2980b9">JobTimeoutSec</span> = <span style="color:#f67400">123 5 </span><span style="font-style:italic">days</span> <span style="color:#f67400">1</span><span style="font-style:italic">m</span> <span style="color:#f67400">12 1</span><span style="font-style:italic">sec</span> <span style="color:#f67400">123</span><span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#f67400">23 </span><span style="font-style:italic">msec</span> <span style="color:#f67400">13 1</span><span style="font-style:italic">us</span>
<span style="color:#2980b9">JobTimeoutSec</span> = <span style="color:#27aeae;font-weight:bold">infinity</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">JobTimeoutSec</span> = invalid
<span style="color:#2980b9">JobTimeoutSec</span> = inf
<span style="color:#2980b9">JobTimeoutSec</span> = -<span style="color:#f67400">10</span>
<span style="color:#2980b9">JobTimeoutSec</span> = <span style="color:#f67400">0.235</span>
<span style="color:#7a7c7d">###### timestamping</span>
<span style="font-weight:bold">[Socket]</span>
<span style="color:#2980b9">Timestamping</span> = <span style="color:#27aeae;font-weight:bold">ns</span>
<span style="color:#2980b9">Timestamping</span> = <span style="color:#27aeae;font-weight:bold">nsec</span>
<span style="color:#2980b9">Timestamping</span> = <span style="color:#27aeae;font-weight:bold">off</span>
<span style="color:#2980b9">Timestamping</span> = <span style="color:#27aeae;font-weight:bold">us</span>
<span style="color:#2980b9">Timestamping</span> = <span style="color:#27aeae;font-weight:bold">usec</span>
<span style="color:#7a7c7d"># using UTF-8 "Micro Sign" U+00B5 &amp;micro; &amp;#181; &amp;#xB5;</span>
<span style="color:#2980b9">Timestamping</span> = <span style="color:#27aeae;font-weight:bold">µs</span>
<span style="color:#7a7c7d"># using UTF-8 "Greek Small Letter Mu" U+03BC &amp;mu; &amp;#956; &amp;#x3BC;</span>
<span style="color:#2980b9">Timestamping</span> = <span style="color:#27aeae;font-weight:bold">μs</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">Timestamping</span> = nanosec
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">Timestamping</span> = <span style="color:#27aeae;font-weight:bold">nsec</span> off
<span style="color:#7a7c7d">###### unit</span>
<span style="font-weight:bold">[Path]</span>
<span style="color:#7a7c7d">#</span><span style="color:#81ca2d;background-color:#4d1f24;font-weight:bold">###</span><span style="color:#7a7c7d"> names</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some-name</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some.name</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some:name</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@instance</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@other-instance</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@other.instance</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@other:instance</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@other@instance</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@other</span><span style="color:#3daee9">%i</span><span style="color:#27ae60;font-weight:bold">instance</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">systemd-fsck</span><span style="color:#27ae60;font-weight:bold">@dev-nvme0n1p2</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@</span><span style="color:#3daee9">%i</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">dev-disk-by</span><span style="color:#3daee9">\x2d</span><span style="color:#27ae60">uuid-5af23b</span><span style="color:#3daee9">\x2d</span><span style="color:#27ae60">fde6</span><span style="color:#3daee9">\x2d</span><span style="color:#27ae60">424e</span><span style="color:#3daee9">\x2d</span><span style="color:#27ae60">a1bb</span><span style="color:#3daee9">\x2d</span><span style="color:#27ae60">e88bc</span><span style="color:#27ae60;font-style:italic">.swap</span>
<span style="color:#7a7c7d">## invalid names</span>
<span style="color:#7a7c7d"># \x2x is an invalid escape as 2x is no hex number</span>
<span style="color:#2980b9">Unit</span> = dev-disk-by\<span style="color:#27ae60">x2xuuid-5af23b</span><span style="color:#3daee9">\x2d</span><span style="color:#27ae60">fde6</span><span style="color:#3daee9">\x2d</span><span style="color:#27ae60">424e</span><span style="color:#3daee9">\x2d</span><span style="color:#27ae60">a1bb</span><span style="color:#3daee9">\x2d</span><span style="color:#27ae60">e88bc</span><span style="color:#27ae60;font-style:italic">.swap</span>
<span style="color:#7a7c7d">#</span><span style="color:#81ca2d;background-color:#4d1f24;font-weight:bold">###</span><span style="color:#7a7c7d"> extensions</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.automount</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.device</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.mount</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.socket</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.slice</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.swap</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.target</span>
<span style="color:#7a7c7d">## invalid extension</span>
<span style="color:#2980b9">Unit</span> = some.invalid
<span style="color:#7a7c7d"># incomplete unit, missing extension</span>
<span style="color:#2980b9">Unit</span> = some.
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span>some-other.service
<span style="color:#2980b9">Unit</span> = <span style="color:#27ae60">some.service</span><span style="color:#27ae60;font-style:italic">.service </span>\
some.other.service.service
<span style="color:#7a7c7d">###### unit list</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#7a7c7d">#</span><span style="color:#81ca2d;background-color:#4d1f24;font-weight:bold">###</span><span style="color:#7a7c7d"> names</span>
<span style="color:#2980b9">After</span> = <span style="color:#27ae60">some.service</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27ae60">some.other.service</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@instance</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@</span><span style="color:#3daee9">%i</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#7a7c7d"># incomplete unit, missing extension</span>
<span style="color:#2980b9">After</span> = some. <span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span><span style="color:#fdbc4b;font-weight:bold">\</span>
<span style="color:#27ae60">some-other</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#7a7c7d">###### unit list socket</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">Sockets</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.socket </span><span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@instance</span><span style="color:#27ae60;font-style:italic">.socket</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">Sockets</span> = some.service
<span style="color:#2980b9">Sockets</span> = some.service <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.socket</span>
<span style="color:#7a7c7d">###### unit service</span>
<span style="font-weight:bold">[Socket]</span>
<span style="color:#2980b9">Service</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#2980b9">Service</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@instance</span><span style="color:#27ae60;font-style:italic">.service</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">Service</span> = some.invalid
<span style="color:#7a7c7d"># other unit types</span>
<span style="color:#2980b9">Service</span> = some.socket
<span style="color:#2980b9">Service</span> = some.target
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">Service</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.service </span>other.service
<span style="color:#7a7c7d">###### unit slice</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">Slice</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.slice</span>
<span style="color:#2980b9">Slice</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-weight:bold">@instance</span><span style="color:#27ae60;font-style:italic">.slice</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#7a7c7d"># other unit types</span>
<span style="color:#2980b9">Slice</span> = some.service
<span style="color:#2980b9">Slice</span> = some.target
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">Slice</span> = <span style="color:#27ae60">some</span><span style="color:#27ae60;font-style:italic">.slice </span>other.slice
<span style="color:#7a7c7d">###### utmp mode</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">UtmpMode</span> = <span style="color:#27aeae;font-weight:bold">init</span>
<span style="color:#2980b9">UtmpMode</span> = <span style="color:#27aeae;font-weight:bold">login</span>
<span style="color:#2980b9">UtmpMode</span> = <span style="color:#27aeae;font-weight:bold">user</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">UtmpMode</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">UtmpMode</span> = <span style="color:#27aeae;font-weight:bold">login</span> user
<span style="color:#7a7c7d">###### variable assignments</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">Environment</span> = <span style="color:#27aeae">DISPLAY</span>=:<span style="color:#3daee9">%i</span>
<span style="color:#2980b9">Environment</span> = <span style="color:#27aeae">XAUTHORITY</span>=<span style="color:#3daee9">%t</span>/Xauthority.<span style="color:#3daee9">%i</span> <span style="color:#27aeae">var1</span>=15 <span style="color:#fdbc4b;font-weight:bold">\</span>
"<span style="color:#27aeae">var2</span>=value with spaces" <span style="color:#27aeae">EMPTY</span>=
<span style="color:#2980b9">Environment</span> = <span style="color:#27aeae">XDG_VTNR</span>=vt<span style="color:#3daee9">%i</span>
<span style="color:#2980b9">LogExtraFields</span> = <span style="color:#27aeae">NAME</span>=VALUE
<span style="color:#7a7c7d">###### virtualization</span>
<span style="font-weight:bold">[Unit]</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">acrn</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">bhyve</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">bochs</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">docker</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">google</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">kvm</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">lxc</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">lxc-libvirt</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">microsoft</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">openvz</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">oracle</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">parallels</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">qemu</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">qnx</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">rkt</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">sre</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">systemd-nspawn</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">uml</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">vmware</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">wsl</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">xen</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">zvm</span>
<span style="color:#7a7c7d"># using boolean</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">true</span>
<span style="color:#7a7c7d"># using generic type</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">container</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">vm</span>
<span style="color:#7a7c7d"># private users</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">private-users</span>
<span style="color:#7a7c7d"># negated</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#da4453">!</span><span style="color:#27aeae;font-weight:bold">vmware</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">ConditionVirtualization</span> = i<span style="color:#27aeae;font-weight:bold">n</span>valid
<span style="color:#2980b9">ConditionVirtualization</span> = i<span style="color:#27aeae;font-weight:bold">n</span>valid vmware
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">ConditionVirtualization</span> = <span style="color:#27aeae;font-weight:bold">xen</span> vmware
<span style="color:#7a7c7d">###### weight</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#7a7c7d"># integer 1..10000</span>
<span style="color:#2980b9">IOWeight</span> = <span style="color:#f67400">1</span>
<span style="color:#2980b9">IOWeight</span> = <span style="color:#f67400">12</span>
<span style="color:#2980b9">IOWeight</span> = <span style="color:#f67400">123</span>
<span style="color:#2980b9">IOWeight</span> = <span style="color:#f67400">1234</span>
<span style="color:#2980b9">IOWeight</span> = <span style="color:#f67400">1234</span>
<span style="color:#2980b9">IOWeight</span> = <span style="color:#f67400">10000</span>
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#2980b9">IOWeight</span> = -<span style="color:#f67400">1</span>
<span style="color:#2980b9">IOWeight</span> = 0
<span style="color:#2980b9">IOWeight</span> = 1000<span style="color:#f67400">1</span>
<span style="color:#2980b9">IOWeight</span> = 1<span style="color:#f67400">2345</span>
<span style="color:#2980b9">IOWeight</span> = 12.<span style="color:#f67400">3</span>
<span style="color:#2980b9">IOWeight</span> = invalid
<span style="color:#7a7c7d"># multiple values</span>
<span style="color:#2980b9">IOWeight</span> = 1 <span style="color:#f67400">10000</span>
<span style="color:#7a7c7d">###### working directory</span>
<span style="font-weight:bold">[Service]</span>
<span style="color:#2980b9">WorkingDirectory</span> = <span style="color:#3daee9">~</span>
<span style="color:#2980b9">WorkingDirectory</span> = <span style="color:#da4453">-</span> <span style="color:#3daee9">~</span>
<span style="color:#2980b9">WorkingDirectory</span> = <span style="color:#3daee9">%h</span>
<span style="color:#2980b9">WorkingDirectory</span> = /some/absolute/path
<span style="color:#2980b9">WorkingDirectory</span> = <span style="color:#da4453">-</span>/some/absolute-path
<span style="color:#2980b9">WorkingDirectory</span> = <span style="color:#da4453">-</span> /some/absolute/path
<span style="color:#7a7c7d">## invalid values</span>
<span style="color:#7a7c7d"># using `-` without a path</span>
<span style="color:#2980b9">WorkingDirectory</span> = <span style="color:#da4453">-</span>
<span style="color:#7a7c7d"># multiple paths</span>
<span style="color:#2980b9">WorkingDirectory</span> = <span style="color:#3daee9">~</span> /some/absolute/path
<span style="color:#2980b9">WorkingDirectory</span> = /some/absolute/path <span style="color:#3daee9">~</span>
<span style="color:#2980b9">WorkingDirectory</span> = /some/absolute/path /some/other/path
<span style="color:#2980b9">WorkingDirectory</span> = <span style="color:#da4453">-</span> - /some/absolute/path
</pre></body></html>