2025-02-16 12:25:41 +01:00
|
|
|
# This unit is meant to be started by network management software
|
|
|
|
|
# after a network interface defined in the NBFT gets set up
|
|
|
|
|
[Unit]
|
|
|
|
|
Description=Connect NBFT-defined NVMe-oF subsystems automatically
|
|
|
|
|
ConditionPathExists=|/sys/firmware/acpi/tables/NBFT
|
|
|
|
|
ConditionPathExists=|/sys/firmware/acpi/tables/NBFT1
|
|
|
|
|
Wants=modprobe@nvme_fabrics.service
|
|
|
|
|
After=modprobe@nvme_fabrics.service
|
|
|
|
|
After=network-online.target
|
|
|
|
|
Before=remote-fs-pre.target
|
|
|
|
|
|
|
|
|
|
[Service]
|
2025-02-16 12:26:52 +01:00
|
|
|
ProtectSystem=full
|
|
|
|
|
ProtectHome=true
|
|
|
|
|
ProtectHostname=true
|
|
|
|
|
ProtectKernelModules=true
|
|
|
|
|
ProtectKernelLogs=true
|
|
|
|
|
ProtectControlGroups=true
|
|
|
|
|
ProtectProc=invisible
|
|
|
|
|
RestrictRealtime=true
|
|
|
|
|
LockPersonality=yes
|
|
|
|
|
MemoryDenyWriteExecute=yes
|
|
|
|
|
RemoveIPC=yes
|
|
|
|
|
RestrictAddressFamilies=AF_INET AF_INET6
|
2025-02-16 12:25:41 +01:00
|
|
|
Type=oneshot
|
|
|
|
|
ExecStart=@SBINDIR@/nvme connect-all --nbft
|
