This unit is provided by:
Options
-
[Service]
-
CPUSchedulingPolicy=batch
-
CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_NET_RAW
-
ExecStart=/usr/bin/systemd-inhibit --who="borgmatic" --why="Prevent interrupting scheduled backup" /usr/bin/borgmatic --verbosity -1 --syslog-verbosity 1
-
ExecStart=systemd-inhibit --who="borgmatic" --what="sleep:shutdown" --why="Prevent interrupting scheduled backup" /usr/bin/borgmatic --verbosity -1 --syslog-verbosity 1
-
ExecStartPre=/usr/bin/sleep 1m
-
ExecStartPre=sleep 1m
-
IOSchedulingClass=best-effort
-
IOSchedulingPriority=7
-
IOWeight=100
-
LockPersonality
Introduced in systemd 235=yes -
LogRateLimitIntervalSec=0
-
MemoryDenyWriteExecute
Introduced in systemd 231=no -
Nice=19
-
NoNewPrivileges
Introduced in systemd 239=yes -
PrivateDevices
Introduced in systemd 209=yes -
PrivateTmp=yes
-
ProtectClock
Introduced in systemd 245=yes -
ProtectControlGroups
Introduced in systemd 232=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
ProtectKernelModules
Introduced in systemd 232=yes -
ProtectKernelTunables
Introduced in systemd 232=yes -
ProtectSystem
Introduced in systemd 214=full -
Restart=no
-
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
RestrictSUIDSGID
Introduced in systemd 242=yes -
SystemCallArchitectures=native
-
SystemCallErrorNumber=EPERM
-
SystemCallFilter=@system-service
-
Type=oneshot
-
-
[Unit]
-
After=network-online.target
-
ConditionACPower=yes
-
ConditionFileNotEmpty=/etc/borgmatic/config.yaml
-
Description=borgmatic backup
-
Documentation=https://torsion.org/borgmatic/
-
Wants=network-online.target
-
Additionnal notes
Nothing here.