systemd-machined.service

This unit is provided by:

• https://archlinux.org/packages/core/x86_64/systemd/

• https://packages.debian.org/unstable/systemd-container

• https://packages.fedoraproject.org/pkgs/systemd/systemd-container/

• https://software.opensuse.org/package/systemd-container

Options

• [Service]
  • BusName=org.freedesktop.machine1
  • CapabilityBoundingSet=CAP_KILL CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_SETGID CAP_SYS_CHROOT CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CAP_LINUX_IMMUTABLE
  • ExecStart=/lib/systemd/systemd-machined
  • ExecStart=/usr/lib/systemd/systemd-machined
  • IPAddressDeny=any
  • LockPersonality
    Introduced in systemd 235
    =yes
  • MemoryDenyWriteExecute
    Introduced in systemd 231
    =yes
  • NoNewPrivileges
    Introduced in systemd 239
    =yes
  • ProtectHostname
    Introduced in systemd 242
    =yes
  • RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
  • RestrictRealtime
    Introduced in systemd 231
    =yes
  • SystemCallArchitectures=native
  • SystemCallErrorNumber=EPERM
  • SystemCallFilter=@system-service @mount
  • WatchdogSec=3min
• [Unit]
  • After=machine.slice
  • Description=Virtual Machine and Container Registration Service
  • Documentation=man:systemd-machined.service(8) man:org.freedesktop.machine1(5)
  • RequiresMountsFor=/var/lib/machines
  • Wants=machine.slice

Additionnal notes

Nothing here.