From d4e421d31c739c21bd0cb97d32cfddd806c28568 Mon Sep 17 00:00:00 2001 From: Kevin Morris <kevr@0cost.org> Date: Sun, 16 Jan 2022 21:01:19 -0800 Subject: [PATCH] change: run systemd services with poetry Signed-off-by: Kevin Morris <kevr@0cost.org> --- roles/aurweb/templates/aurweb-aurblup.service.j2 | 3 ++- roles/aurweb/templates/aurweb-mkpkglists.service.j2 | 3 ++- roles/aurweb/templates/aurweb-pkgmaint.service.j2 | 3 ++- roles/aurweb/templates/aurweb-popupdate.service.j2 | 3 ++- roles/aurweb/templates/aurweb-tuvotereminder.service.j2 | 3 ++- roles/aurweb/templates/aurweb-usermaint.service.j2 | 3 ++- 6 files changed, 12 insertions(+), 6 deletions(-) diff --git a/roles/aurweb/templates/aurweb-aurblup.service.j2 b/roles/aurweb/templates/aurweb-aurblup.service.j2 index b40979286..2f0452c15 100644 --- a/roles/aurweb/templates/aurweb-aurblup.service.j2 +++ b/roles/aurweb/templates/aurweb-aurblup.service.j2 @@ -6,7 +6,8 @@ After=mysqld.service [Service] Type=oneshot User={{ aurweb_user }} -ExecStart=/usr/local/bin/aurweb-aurblup +WorkingDirectory={{ aurweb_dir }} +ExecStart=/usr/bin/poetry run aurweb-aurblup ReadWritePaths={{ aurweb_dir }} NoNewPrivileges=true diff --git a/roles/aurweb/templates/aurweb-mkpkglists.service.j2 b/roles/aurweb/templates/aurweb-mkpkglists.service.j2 index a205d02c0..50b25756e 100644 --- a/roles/aurweb/templates/aurweb-mkpkglists.service.j2 +++ b/roles/aurweb/templates/aurweb-mkpkglists.service.j2 @@ -6,7 +6,8 @@ After=mysqld.service [Service] Type=oneshot User={{ aurweb_user }} -ExecStart=/usr/local/bin/aurweb-mkpkglists --extended +WorkingDirectory={{ aurweb_dir }} +ExecStart=/usr/bin/poetry run aurweb-mkpkglists --extended NoNewPrivileges=true LockPersonality=true diff --git a/roles/aurweb/templates/aurweb-pkgmaint.service.j2 b/roles/aurweb/templates/aurweb-pkgmaint.service.j2 index 1c1ca12fd..7db71c195 100644 --- a/roles/aurweb/templates/aurweb-pkgmaint.service.j2 +++ b/roles/aurweb/templates/aurweb-pkgmaint.service.j2 @@ -6,7 +6,8 @@ After=mysqld.service [Service] Type=oneshot User={{ aurweb_user }} -ExecStart=/usr/local/bin/aurweb-pkgmaint +WorkingDirectory={{ aurweb_dir }} +ExecStart=/usr/bin/poetry run aurweb-pkgmaint NoNewPrivileges=true LockPersonality=true diff --git a/roles/aurweb/templates/aurweb-popupdate.service.j2 b/roles/aurweb/templates/aurweb-popupdate.service.j2 index 99e3aa6ab..346c13b01 100644 --- a/roles/aurweb/templates/aurweb-popupdate.service.j2 +++ b/roles/aurweb/templates/aurweb-popupdate.service.j2 @@ -6,7 +6,8 @@ After=mysqld.service [Service] Type=oneshot User={{ aurweb_user }} -ExecStart=/usr/local/bin/aurweb-popupdate +WorkingDirectory={{ aurweb_dir }} +ExecStart=/usr/bin/poetry run aurweb-popupdate NoNewPrivileges=true LockPersonality=true diff --git a/roles/aurweb/templates/aurweb-tuvotereminder.service.j2 b/roles/aurweb/templates/aurweb-tuvotereminder.service.j2 index 3497e6515..f7510a868 100644 --- a/roles/aurweb/templates/aurweb-tuvotereminder.service.j2 +++ b/roles/aurweb/templates/aurweb-tuvotereminder.service.j2 @@ -6,7 +6,8 @@ After=mysqld.service [Service] Type=oneshot User={{ aurweb_user }} -ExecStart=/usr/local/bin/aurweb-tuvotereminder +WorkingDirectory={{ aurweb_dir }} +ExecStart=/usr/bin/poetry run aurweb-tuvotereminder NoNewPrivileges=true LockPersonality=true diff --git a/roles/aurweb/templates/aurweb-usermaint.service.j2 b/roles/aurweb/templates/aurweb-usermaint.service.j2 index f5691a414..46dd3c3bf 100644 --- a/roles/aurweb/templates/aurweb-usermaint.service.j2 +++ b/roles/aurweb/templates/aurweb-usermaint.service.j2 @@ -6,7 +6,8 @@ After=mysqld.service [Service] Type=oneshot User={{ aurweb_user }} -ExecStart=/usr/local/bin/aurweb-usermaint +WorkingDirectory={{ aurweb_dir }} +ExecStart=/usr/bin/poetry run aurweb-usermaint NoNewPrivileges=true LockPersonality=true -- GitLab