This unit is provided by:
Options
-
[Service]
-
BusName=org.freedesktop.machine1
-
CapabilityBoundingSet=CAP_KILL CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_SETGID CAP_SYS_CHROOT CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CAP_LINUX_IMMUTABLE
-
ExecStart=/lib/systemd/systemd-machined
-
ExecStart=/usr/lib/systemd/systemd-machined
-
IPAddressDeny=any
-
LockPersonality
Introduced in systemd 235=yes -
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
NoNewPrivileges
Introduced in systemd 239=yes -
ProtectHostname
Introduced in systemd 242=yes -
RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
-
RestrictRealtime
Introduced in systemd 231=yes -
SystemCallArchitectures=native
-
SystemCallErrorNumber=EPERM
-
SystemCallFilter=@system-service @mount
-
WatchdogSec=3min
-
-
[Unit]
-
After=machine.slice
-
Description=Virtual Machine and Container Registration Service
-
Documentation=man:systemd-machined.service(8) man:org.freedesktop.machine1(5)
-
RequiresMountsFor=/var/lib/machines
-
Wants=machine.slice
-
Additionnal notes
Nothing here.