File tree Expand file tree Collapse file tree 1 file changed +38
-1
lines changed
Expand file tree Collapse file tree 1 file changed +38
-1
lines changed Original file line number Diff line number Diff line change @@ -14323,7 +14323,44 @@ touch /etc/systemd/system/polkadot-validator.service
1432314323In this unit file, you will write the commands that you want to run on server boot/restart:
1432414324
1432514325```systemd title="/etc/systemd/system/polkadot-validator.service"
14326- Failed to fetch snippet after 3 attempts
14326+ [Unit]
14327+ Description=Polkadot Node
14328+ After=network.target
14329+ Documentation=https://github.com/paritytech/polkadot-sdk
14330+
14331+ [Service]
14332+ EnvironmentFile=-/etc/default/polkadot
14333+ ExecStart=/usr/bin/polkadot $POLKADOT_CLI_ARGS
14334+ User=polkadot
14335+ Group=polkadot
14336+ Restart=always
14337+ RestartSec=120
14338+ CapabilityBoundingSet=
14339+ LockPersonality=true
14340+ NoNewPrivileges=true
14341+ PrivateDevices=true
14342+ PrivateMounts=true
14343+ PrivateTmp=true
14344+ PrivateUsers=true
14345+ ProtectClock=true
14346+ ProtectControlGroups=true
14347+ ProtectHostname=true
14348+ ProtectKernelModules=true
14349+ ProtectKernelTunables=true
14350+ ProtectSystem=strict
14351+ RemoveIPC=true
14352+ RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK AF_UNIX
14353+ RestrictNamespaces=false
14354+ RestrictSUIDSGID=true
14355+ SystemCallArchitectures=native
14356+ SystemCallFilter=@system-service
14357+ SystemCallFilter=landlock_add_rule landlock_create_ruleset landlock_restrict_self seccomp mount umount2
14358+ SystemCallFilter=~@clock @module @reboot @swap @privileged
14359+ SystemCallFilter=pivot_root
14360+ UMask=0027
14361+
14362+ [Install]
14363+ WantedBy=multi-user.target
1432714364```
1432814365
1432914366!!! warning "Restart delay and equivocation risk"
You can’t perform that action at this time.
0 commit comments