X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=filesystem%2Fetc%2Fsystemd%2Fsystem%2Fbitcoind.service;fp=filesystem%2Fetc%2Fsystemd%2Fsystem%2Fbitcoind.service;h=0000000000000000000000000000000000000000;hb=f27b67a1dfa58b5f101bba607b2f91a73e65299e;hp=1c3377f3e1c13009303db8e73548d0fc2b9a59e3;hpb=7ed3b98c4d3678d982c33741f1f42727144e66ce;p=distro-setup diff --git a/filesystem/etc/systemd/system/bitcoind.service b/filesystem/etc/systemd/system/bitcoind.service deleted file mode 100644 index 1c3377f..0000000 --- a/filesystem/etc/systemd/system/bitcoind.service +++ /dev/null @@ -1,95 +0,0 @@ -# iank: copied from /a/opt/bitcoin/contrib/init/bitcoind.service -# for sources as of 2024-04-22 - -# It is not recommended to modify this file in-place, because it will -# be overwritten during package upgrades. If you want to add further -# options or overwrite existing ones then use -# $ systemctl edit bitcoind.service -# See "man systemd.service" for details. - -# Note that almost all daemon options could be specified in -# /etc/bitcoin/bitcoin.conf, but keep in mind those explicitly -# specified as arguments in ExecStart= will override those in the -# config file. - -[Unit] -Description=Bitcoin daemon -Documentation=https://github.com/bitcoin/bitcoin/blob/master/doc/init.md - -# https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/ -After=network-online.target -Wants=network-online.target - -[Service] -# iank: on a laptop, when it is doing its catchup, it tends to jump -# between 100% and 180% cpu and makes the fan spin annoyingly. -# 50% still had annoying fan spin. trying out 20% -CPUQuota=20% -ExecStart=/usr/bin/bitcoind -pid=/run/bitcoind/bitcoind.pid \ - -conf=/etc/bitcoin/bitcoin.conf \ - -datadir=/var/lib/bitcoind \ - -startupnotify='systemd-notify --ready' \ - -shutdownnotify='systemd-notify --stopping' - -# Make sure the config directory is readable by the service user -PermissionsStartOnly=true -ExecStartPre=/bin/chgrp bitcoin /etc/bitcoin - -# Process management -#################### - -Type=notify -NotifyAccess=all -PIDFile=/run/bitcoind/bitcoind.pid - -Restart=on-failure -TimeoutStartSec=infinity -TimeoutStopSec=600 - -# Directory creation and permissions -#################################### - -# Run as bitcoin:bitcoin -User=bitcoin -Group=bitcoin - -# /run/bitcoind -RuntimeDirectory=bitcoind -RuntimeDirectoryMode=0710 - -# /etc/bitcoin -ConfigurationDirectory=bitcoin -ConfigurationDirectoryMode=0710 - -# /var/lib/bitcoind -StateDirectory=bitcoind -StateDirectoryMode=0710 - -# Hardening measures -#################### - -# Provide a private /tmp and /var/tmp. -PrivateTmp=true - -# Mount /usr, /boot/ and /etc read-only for the process. -ProtectSystem=full - -# Deny access to /home, /root and /run/user -ProtectHome=true - -# Disallow the process and all of its children to gain -# new privileges through execve(). -NoNewPrivileges=true - -# Use a new /dev namespace only populated with API pseudo devices -# such as /dev/null, /dev/zero and /dev/random. -PrivateDevices=true - -# Deny the creation of writable and executable memory mappings. -MemoryDenyWriteExecute=true - -# Restrict ABIs to help ensure MemoryDenyWriteExecute is enforced -SystemCallArchitectures=native - -[Install] -WantedBy=multi-user.target