This unit is provided by:
Options
- 
    [Install]- 
        Also=systemd-sysupdate.timer
 
- 
        
- 
    [Service]- 
        CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CAP_SETFCAP CAP_SYS_ADMIN CAP_SETPCAP CAP_DAC_OVERRIDE CAP_LINUX_IMMUTABLE
- 
        ExecStart=/usr/lib/systemd/systemd-sysupdate update
- 
        LockPersonalityIntroduced in systemd 235=yes
- 
        MemoryDenyWriteExecuteIntroduced in systemd 231=yes
- 
        NoNewPrivilegesIntroduced in systemd 239=yes
- 
        NotifyAccess=main
- 
        ProtectHostnameIntroduced in systemd 242=yes
- 
        RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
- 
        RestrictNamespacesIntroduced in systemd 233=net
- 
        RestrictRealtimeIntroduced in systemd 231=yes
- 
        SystemCallArchitectures=native
- 
        SystemCallErrorNumber=EPERM
- 
        SystemCallFilter=@system-service @mount
- 
        Type=simple
 
- 
        
- 
    [Unit]- 
        After=network-online.target
- 
        ConditionVirtualization=!container
- 
        Description=Automatic System Update
- 
        Documentation=man:systemd-sysupdate.service(8)
- 
        Wants=network-online.target
 
- 
        
Additionnal notes
Nothing here.