aboutsummaryrefslogtreecommitdiff
path: root/gerboweb/deploy/clippy-nspawn.service
diff options
context:
space:
mode:
authorjaseg <git@jaseg.net>2020-12-30 13:12:06 +0100
committerjaseg <git@jaseg.net>2020-12-30 13:12:06 +0100
commitc6b1c2225d1ac4ac647950be8667b5709b0033a1 (patch)
tree8db7a14649a277d236791e1c731d98af03a0af88 /gerboweb/deploy/clippy-nspawn.service
parente290ac758b02a9d03bacd511c87fc997db41d0a8 (diff)
downloadgerbolyze-c6b1c2225d1ac4ac647950be8667b5709b0033a1.tar.gz
gerbolyze-c6b1c2225d1ac4ac647950be8667b5709b0033a1.tar.bz2
gerbolyze-c6b1c2225d1ac4ac647950be8667b5709b0033a1.zip
remove ansible scripts, they are now in their own "infra" repo
Diffstat (limited to 'gerboweb/deploy/clippy-nspawn.service')
-rw-r--r--gerboweb/deploy/clippy-nspawn.service36
1 files changed, 0 insertions, 36 deletions
diff --git a/gerboweb/deploy/clippy-nspawn.service b/gerboweb/deploy/clippy-nspawn.service
deleted file mode 100644
index 8dbedbd..0000000
--- a/gerboweb/deploy/clippy-nspawn.service
+++ /dev/null
@@ -1,36 +0,0 @@
-# SPDX-License-Identifier: LGPL-2.1+
-#
-# This file is part of systemd.
-#
-# systemd is free software; you can redistribute it and/or modify it
-# under the terms of the GNU Lesser General Public License as published by
-# the Free Software Foundation; either version 2.1 of the License, or
-# (at your option) any later version.
-
-[Unit]
-Description=Clippy container
-PartOf=machines.target
-Before=machines.target
-After=network.target systemd-resolved.service
-RequiresMountsFor=/var/lib/machines
-
-[Service]
-ExecStart=/usr/bin/systemd-nspawn --quiet --keep-unit --ephemeral --boot -U --settings=override --machine=clippy
-KillMode=mixed
-Type=notify
-RestartForceExitStatus=133
-SuccessExitStatus=133
-WatchdogSec=3min
-Slice=machine.slice
-Delegate=yes
-TasksMax=512
-
-# Enforce a strict device policy, similar to the one nspawn configures when it
-# allocates its own scope unit. Make sure to keep these policies in sync if you
-# change them!
-DevicePolicy=closed
-DeviceAllow=/dev/net/tun rwm
-DeviceAllow=char-pts rw
-
-[Install]
-WantedBy=machines.target