mirror of
https://github.com/oxen-io/lokinet.git
synced 2024-11-15 12:13:24 +00:00
2e50981408
Setcap causes problems (like issue #1007), so stop using it (and undo the permission override on upgrade) and instead set capabilities via the systemd services. (This also fixes some AssertFileNotEmpty declarations that were in the wrong places).
22 lines
688 B
Desktop File
22 lines
688 B
Desktop File
[Unit]
|
|
Description=LokiNET: Anonymous Network layer thingydoo, client
|
|
AssertFileNotEmpty=/var/lib/lokinet/bootstrap.signed
|
|
Wants=network-online.target
|
|
After=network-online.target
|
|
|
|
[Service]
|
|
User=_lokinet
|
|
SyslogIdentifier=lokinet
|
|
WorkingDirectory=/var/lib/lokinet
|
|
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
|
|
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
|
|
ExecStart=/usr/bin/lokinet /var/lib/lokinet/lokinet.ini
|
|
ExecStartPost=+/usr/sbin/lokinet-resolvconf add /var/lib/lokinet/lokinet.ini
|
|
ExecStopPost=+/usr/sbin/lokinet-resolvconf remove /var/lib/lokinet/lokinet.ini
|
|
Environment=LOKINET_NETID=lokinet
|
|
Restart=always
|
|
RestartSec=5s
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|