lots of fixes, improvements, t12 stuff

[distro-setup] / filesystem / etc / systemd / system / bitcoind.service

diff --git a/filesystem/etc/systemd/system/bitcoind.service b/filesystem/etc/systemd/system/bitcoind.service
deleted file mode 100644 (file)
index 1c3377f..0000000
--- a/filesystem/etc/systemd/system/bitcoind.service
+++ /dev/null
@@ -1,95 +0,0 @@
-# iank: copied from /a/opt/bitcoin/contrib/init/bitcoind.service
-# for sources as of 2024-04-22
-
-# It is not recommended to modify this file in-place, because it will
-# be overwritten during package upgrades. If you want to add further
-# options or overwrite existing ones then use
-# $ systemctl edit bitcoind.service
-# See "man systemd.service" for details.
-
-# Note that almost all daemon options could be specified in
-# /etc/bitcoin/bitcoin.conf, but keep in mind those explicitly
-# specified as arguments in ExecStart= will override those in the
-# config file.
-
-[Unit]
-Description=Bitcoin daemon
-Documentation=https://github.com/bitcoin/bitcoin/blob/master/doc/init.md
-
-# https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-# iank: on a laptop, when it is doing its catchup, it tends to jump
-# between 100% and 180% cpu and makes the fan spin annoyingly.
-# 50% still had annoying fan spin. trying out 20%
-CPUQuota=20%
-ExecStart=/usr/bin/bitcoind -pid=/run/bitcoind/bitcoind.pid \
-                            -conf=/etc/bitcoin/bitcoin.conf \
-                            -datadir=/var/lib/bitcoind \
-                            -startupnotify='systemd-notify --ready' \
-                            -shutdownnotify='systemd-notify --stopping'
-
-# Make sure the config directory is readable by the service user
-PermissionsStartOnly=true
-ExecStartPre=/bin/chgrp bitcoin /etc/bitcoin
-
-# Process management
-####################
-
-Type=notify
-NotifyAccess=all
-PIDFile=/run/bitcoind/bitcoind.pid
-
-Restart=on-failure
-TimeoutStartSec=infinity
-TimeoutStopSec=600
-
-# Directory creation and permissions
-####################################
-
-# Run as bitcoin:bitcoin
-User=bitcoin
-Group=bitcoin
-
-# /run/bitcoind
-RuntimeDirectory=bitcoind
-RuntimeDirectoryMode=0710
-
-# /etc/bitcoin
-ConfigurationDirectory=bitcoin
-ConfigurationDirectoryMode=0710
-
-# /var/lib/bitcoind
-StateDirectory=bitcoind
-StateDirectoryMode=0710
-
-# Hardening measures
-####################
-
-# Provide a private /tmp and /var/tmp.
-PrivateTmp=true
-
-# Mount /usr, /boot/ and /etc read-only for the process.
-ProtectSystem=full
-
-# Deny access to /home, /root and /run/user
-ProtectHome=true
-
-# Disallow the process and all of its children to gain
-# new privileges through execve().
-NoNewPrivileges=true
-
-# Use a new /dev namespace only populated with API pseudo devices
-# such as /dev/null, /dev/zero and /dev/random.
-PrivateDevices=true
-
-# Deny the creation of writable and executable memory mappings.
-MemoryDenyWriteExecute=true
-
-# Restrict ABIs to help ensure MemoryDenyWriteExecute is enforced
-SystemCallArchitectures=native
-
-[Install]
-WantedBy=multi-user.target