mirror of
https://github.com/armbian/build
synced 2025-09-24 19:47:06 +07:00
Modify logrotate.service
Create a modified logrotate.service to improve armbian-ramlog. See discussion here https://github.com/armbian/build/issues/1582
This commit is contained in:
28
packages/bsp/common/etc/systemd/system/logrotate.service
Normal file
28
packages/bsp/common/etc/systemd/system/logrotate.service
Normal file
@@ -0,0 +1,28 @@
|
||||
[Unit]
|
||||
Description=Rotate log files
|
||||
Documentation=man:logrotate(8) man:logrotate.conf(5)
|
||||
ConditionACPower=true
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
ExecStartPre=/usr/lib/armbian/armbian-ramlog write
|
||||
ExecStart=/usr/sbin/logrotate /etc/logrotate.conf
|
||||
ExecStartPost=/usr/lib/armbian/armbian-ramlog postrotate
|
||||
|
||||
# performance options
|
||||
Nice=19
|
||||
IOSchedulingClass=best-effort
|
||||
IOSchedulingPriority=7
|
||||
|
||||
# hardening options
|
||||
# details: https://www.freedesktop.org/software/systemd/man/systemd.exec.html
|
||||
# no ProtectHome for userdir logs
|
||||
# no PrivateNetwork for mail deliviery
|
||||
# no ProtectKernelTunables for working SELinux with systemd older than 235
|
||||
# no MemoryDenyWriteExecute for gzip on i686
|
||||
PrivateDevices=true
|
||||
PrivateTmp=true
|
||||
ProtectControlGroups=true
|
||||
ProtectKernelModules=true
|
||||
ProtectSystem=full
|
||||
RestrictRealtime=true
|
||||
Reference in New Issue
Block a user