This unit is provided by:
Options
-
[Install]
-
WantedBy=multi-user.target
-
-
[Service]
-
CapabilityBoundingSet=CAP_SYS_MODULE CAP_NET_ADMIN
-
ExecStart=/usr/bin/jool file handle /etc/jool/jool.conf
-
ExecStartPre=/sbin/modprobe jool
-
ExecStop=/usr/bin/jool -f /etc/jool/jool.conf instance remove
-
InaccessiblePaths=/tmp /dev
-
LockPersonality
Introduced in systemd 235=yes -
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
NoNewPrivileges
Introduced in systemd 239=yes -
ProtectControlGroups
Introduced in systemd 232=yes -
ProtectHome
Introduced in systemd 214=yes -
ProtectKernelModules
Introduced in systemd 232=no -
ProtectKernelTunables
Introduced in systemd 232=yes -
ProtectSystem
Introduced in systemd 214=strict -
RemainAfterExit=yes
-
RestrictAddressFamilies=AF_NETLINK
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
SystemCallArchitectures=native
-
Type=oneshot
-
-
[Unit]
-
After=network.target
-
ConditionPathExists=/etc/jool/jool.conf
-
Description=Stateful NAT64
-
Documentation=https://jool.mx/en/documentation.html
-
Additionnal notes
Nothing here.