7�0�Hp�$6�� �;�y�t�]r�n)�_��S��DJ�?�d�����d����[K[�'K�b��# ((
�%��z � E%�0 �P(,���. t�
ExecStart=/usr/lib/systemd/systemd-hostnamed
IPAdces-%i.device network-pre.target
[Service]
NotifyrotectKernelModules=yes
ProtectControlGroups=yes
MnSSH Daemon
Wants=sshdgenkeys.service
After=sshdgev/loop-control and /dev/loop, to implement
# the -c if you
# change them!
DevicePolicy=closed
DeviceuiresMountsFor=/var/lib/machines
[Service]
# MaketectHome=true
KillMode=process
RestartSec=5s
RestaTmp=true
WorkingDirectory=/etc/openvpn/server
Execys
UtmpIdentifier=cons
TTYPath=/dev/console
TTYResuth-quit-wait.service
Before=getty.target
# OCI cE CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD
MemorygSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_RAW CAP_SEb/binfmt.d
ConditionDirectoryNotEmpty=|/usr/lib/biitionPathExists=|!/etc/ssh/ssh_host_ed25519_key.pubin/dbus-daemon --system --address=systemd: --nofotop=/usr/lib/systemd/scripts/iptables-flush
Remain-A -r
SyslogIdentifier=%N
RemainAfterExit=no
[InsCAP_SYS_RAWIO
Documentation=man:e2scrub_all(8)
[S-modules-load.service(8) man:modules-load.d(5)
Defice ipset.service
Documentation=man:firewalld(1)
vars/LoaderSystemToken-4a67b0ed in NVRAM, independent of regular storage.
Condi=WARNING"
ExecStart=/usr/sbin/glusterfsd -N --volfDDRESS LC_TELEPHONE LC_MEASUREMENT LC_IDENTIFICATIce]
# the VT is cleared by TTYVTDisallocate
# The nt-fs.service
Before=systemd-sysusers.service sysiSYS_TIME
ConditionVirtualization=!container
Defaulkill.device
Conflicts=shutdown.target
After=sys-decial(7)
Requisite=multi-user.target
BindsTo=sys-suption=Disk Manager
Documentation=man:udisks(8)
[Sng device %f
DocumDefaultDependencies=no
Conflicts=shutdown.target en the implied warranty of MERCHANTABILITY
# or FITs=1
# This file is part of avahi.
#
# avahi is freline ext4 Metadata Check for All Filesystems
CondirotectKernelModules=yes
ProtectControlGroups=yes
Rrvice
[Unit]
Description=Virtualization lxc daemonns to make it work in the remaining cases.
Conditbut let's
# make this all "just work" for the gene We want first NetworkManager to be stopped.
Beforriority=7
# hardening options
# details: https:/n=Rotate log files
Documentation=man:logrotate(8) we
# guess at 4 files per guest here that is 16k:
r
Requires=virtlogd.socket
Requires=virtlogd-adminng after resume
Documentation=man:syncthing(1)
AftATION=1
Restart=on-abort
PIDFile=/run/lvmetad.pid
VM2 metadata daemon
Documentation=man:lvmetad(8)
Rrd.pid --log-level $LOG_LEVEL $GLUSTERD_OPTIONS
KmoryDenyWriteExecute=yes
NoNewPrivileges=yes
Restaurnal Servicxit statuses
ExecStart=-/usr/lib/git-core/git-daemt=/usr/lib/netcf/netcf-transaction.sh start
Type=o=
# System call interfaces
LockPersonality=yes
SynelTunables=false
ProtectControlGroups=true
ReadWrorg.freedesktop.UPower
ExecStart=/usr/lib/upowerd
y later version.
[Unit]
Description=Serial Getty t necessary (systemd can work
# it out) and system useful with root-on-md in dracut,
# have them alwmount point
Before=%i.mount
BindsTo=%i.mount
Defautem-service
Type=notify
User=systemd-network
Watchbility=CAP_NET_ADMIN
DefaultDependencies=no
# systntegrity of password anart=always
RestartSec=0
UtmpIdentifier=pts/%I
TTYPgenerator(8)
Documentation=man:machinectl(1)
After profile %I
Documentation=man:netctl.profile(5)
Afcription=Talk Server
Documentation=man:talkd(8) ma=libvirtd.service
After=virt-gow for max guests * average disks per guest
# libvnal
[Unit]
Description=Virtual machine lock manageCHROOT CAP_SETGID CAP_SETUID
PrivateNetwork=yes
[ hope that it will be useful, but
# WITHOUT ANY WAk/%i/reset'
[Unit]
Description=dhcpcd on %I
Wants=nmentFile=-/usr/local/lib/zram.conf.d/%i-env
ExecSxecStart=/usr/bin/glustereventsd --pid-file /var/read-only
PrivateTmp=yes
AmbientCapabilities=CAP_SYecStop=/usr/lib/systemd/systemd-update-utmp shutdoDFile=/var/run/sensord.pid
ExecStart=/usr/sbin/senon=https://libvirt.org
[Service]
Type=simple
Envit=/usr/bin/systemd-machine-id-setup --commit
Timeom vgchange --monitor n --ignoreskippedcluster
Remaventd(8) man:lvcreate(8) man:lvchange(8) man:vgchatandardOutput=inherit
StandardError=inherit
KillMornate
[Unit]
Description=Ndctl Monitor Daemon
[Seuser.target
[Unit]
Description=Modem Manager
[Serd-kernel.socket
Restart=always
RestartSec=0
ExecStsystemd-sysusers.service systemd-hwdb-update.servi
ExecStart=/usr/lib/systemd/systemd-timedated
IPAdN
ExecStart=/usr/lib/systemd/systemd-hostnamed
IPAh ruleset ';' include '"/etc/nftables.conf"'
ExecS=/usr/lib/systemd/systemd-volatile-root yes /sysroking=true
ExecStart=/usr/bin/lvmpolld -t 60 -f
Envarget
[Service]
ExecStart=/usr/bin/sshd -D
ExecRecontrol and the block devices /dev/mapper/*.
Devicetwork-veth -U --settings=override --machine=%i
Kiater version.
[Unit]
Description=Container %i
Docicant1
ExecStart=/usr/bin/wpa_supplicant -u
[InsteedsUpdate=/etc
ConditionPathExists=|!/usr/lib/udeersion 2 --suppress-timestamps --confng
ExecStart=/usr/bin/healthd
[Insalth monitoring alarm
[Service]
Type=forking
Execn=man:agetty(8) man:systemd-getty-generator(8)
Aftme=org.freedesktop.portable1
WatchdogSec=3min
CapaD CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE
Limitshutdown.service canberra-system-shutdown-reboot.snd
DefaultDependencies=no
After=alsa-restore.servi]
Type=notify
ExecStart=/usr/bin/virtsecretd --timtdown.target
After=proc-sys-fs-binfmt_misc.automounPathExists=|!/etc/ssh/ssh_host_rsa_key.pub
[Servpe=method_call --dest=org.freedesktop.DBus / org.f=native
LockPersonality=yes
NoNewPrivileges=yes
[e]
Type=oneshot
ExecStart=/usr/bin/rfkill unblock =SERVICE_MODE=1
ExecStart=/usr/bin/e2scrub_all -A Start=/usr/lib/systemd/systemd-modules-load
Timeoules-load.d
ConditionDirectoryNotEmpty=|/run/moduleug and error output also to /var/log/messages
StantemCallArchitectures=native
LockPersonality=yes
[erExit=yes
ExecStart=/usr/bin/bootctl random-seed
get
# Don't run this in a VM environment, becausearbiter process to maintain quorum for replica volATE LC_MONETARY LC_MESSAGES LC_PAPER LC_NAME LC_ADetty. Note
# that serial gettys are covered by serpointer.de/blog/projects/serial-console.html
Afterizard
Documentation=man:systemd-firstboot(1)
DefauecStart=!!/usr/lib/systemd/systemd-timesyncd
LockPe]
ExecStart=/usr/lib/systemd/systemd-rfkill
NoNewhorization Manager
Documentation=man:polkit(8)
[Snerate man database.
ExecStart=/usr/bin/mandb --qu %f
[Unit]
Description=Daily man-db regeneration
Dtarget
ConditionPathExists=!/run/plymouth/pid
[SeExecStart=/usr/lib/systemd/systemd-vconsole-setup
ace, Suite 330, Boston, MA 02111-1307
# USA.
[Unid/%i.conf
Restart=on-failure
RestartPreventExitStaeate System Users
Documentation=man:sysusers.d(5) n.target
ConditionPathExists=/usr/bin/quotaon
[Setem-service @signal @io-evdressFamilies=AF_UNIX
MemoryDenyWriteExecute=yes
Sunds/freedesktop/stereo/system-shutdown.oga
Conditsinit.target
[Unit]
Description=Play Reboot Sound
ay. There might be
# niche usecases where running er the dispatcher before NetworkManager. While disescription=WPA supplicant daemon (interface-specifdir logs
# no PrivateNetwork for mail deliviery
#null
StandardOutput=null
StandardError=null
KillMo
# Need to have at least one file open per guest (=/bin/kill -USR1 $MAINPID
# Loosing the logs is a trigger initrd-fs.target after daemon-reload
ExecSine(1)
Requires=NetworkManager.service
After=Netwo
ExecStart=/usr/lib/systemd/systemd-initctl
NoNewPitNOFILE=65536
Environment="LOG_LEVEL=INFO"
Envirouires=rpcbind.service
After=network.target rpcbindSockets=systemd-journald.socket systemd-journald-dog.socket systemd-journald-audit.socket syslog.socCAP_SETPCAP CAP_NET_RAW CAP_NET_BIND_SERVICE
Capabreedesktop.org/wiki/Software/systemd/resolved
DocutSystem=full
ProtectHome=on
PrivateDevices=on
NoNeion.
[Unit]
Description=Journal Remote Sink Servi initscript-based service
# and libnetcf.so
ExecStgSet=CAP_KeUsers=yes
RestrictNamespaces=yes
# Locked memoryNK
# Execute Mappings
MemoryDenyWriteExecute=true scrub start -B %f
[Unit]
Description=Daemon for pe/blog/projects/serial-console.html
BindsTo=dev-%itramfs to rootfs.
#PIDFile=/run/mdadm/%I.pid
KillMonment=IMSM_NO_PLATFORM=1
# The mdmon starting in hat udev's AF_NETLINK messages are being filtered cStop=/bin/rm -fd %f
[Unit]
Description=Telnet Sersystemd-networkd-wait-online.service has
# WantedBxecStart=!!/usr/lib/systemd/systemd-networkd
LockPtarget systemd-sysusers.service systemd-sysctl.serrvice if either fails
ExecStart=/bin/sh -c '/usr/b
SendSIGHUP=yes
[Unit]
Description=Verify integrit that we shut down all but the main console.
Conflbin/talkd
StandardInput=socket
[Install]
Also=talmpfiles --output=/run/tmpfiles.d/static-nodes.confsts.sh stop
Type=oneshot
RemainAfterExit=yes
Standf we
# allow for 10 disks per guest, we get:
Limitironment=EMAIL_ADDR=root
Ex.freedesktop.RealtimeKit1
NotifyAccess=main
CapabiURPOSE. See the GNU
# General Public License for mdhcpcd -q -w %I
ExecStop=/usr/bin/dhcpcd -x %I
[IAM_DEV_SIZE > /sys/class/block/%i/disksize'
ExecStereventsd.pid
ExecReload=/bin/kill -SIGUSR2 $MAINPunt.target final.target
SuccessAction=reboot-forceBoot/Shutdown
Documg
TimeoutSec=90s
[Unit]
Description=Wait for the e
Type=notify
ExecStart=/usr/bin/virtnetworkd --timt]
Description=Log hardware monitoring data
After=the daemon, which can limit the number of domains bvirtd
ExecStart=/usr/bin/libvirtd $LIBVIRTD_ARGS
stead of Requires so that users
# can disable thesivation.service lvm2-lvmetad.service
Before=local-utdown
[Install]
WantedBy=halt.target poweroff.taser.target
[Unit]
Description=Play Shutdown Sound
ore=shutdown.target
[Service]
Environment=HOME=/r-Z
RemainAfterExit=true
[Install]
WantedBy=basic.ot
ExecStart=/usr/lib/systemd/systemd-sleep hibernbus/hv_kvp
[Service]
ExecStart=/usr/bin/hv_kvp_dausr/lib/systemd/systemd-udevd
KillMode=mixed
Watchversion.
[Unit]
Description=udev Kernel Device Ma
[Service]
BusName=org.freedesktop.timedate1
Capa_CHOWN CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_FOstnamed
[Service]
BusName=org.freedesktop.hostnamversion.
[Unit]
Description=Power-Off
Documeyd(8)
Renitrd-root-fs.target shutdown.target
AssertPathExire=shutdown.target
After=lvm2-lvmpolld.socket
Defaevices=no
PrivateNetwork=yes
PrivateUsers=no
Proteencrypted loopback files, in which case it needs
#nfigures when it
# allocates its own scope unit. MtartPre=-/sbin/modprobe -abq tun loop dm-mod
ExecSeoutSec=90s
[Unit]
Description=WPA supplicant
BefonditionDirectoryNotEmpty=|/etc/udev/hwdb.d/
[Servdnsmasq
ExecStartPre=/usr/bin/dnsmasq --test
ExecSer=network.target
Documentation=man:dnsmasq(8)
[Ser.target
[Unit]
Description=OpenVPN service for %o '-p -- \\u' --noclear --keep-baud console 115200t a console
ConditionPathExists=/dev/console
[SerallArchitectures=native
LockPersonality=yes
IPAddrrvice(8)
RequiresMountsFor=/var/lib/portables
[Set/tun rw
ProtectSystem=true
ProtectHome=true
KillMoot system-bootup
[Install]
WantedBy=sound.target
RestrictRealtime=yes
RestrictNamespaces=net
Restrs
ExecStart=/usr/lib/systemd/systemd-binfmt
Timeou/binfmt-misc.html
Docun
ConditionPathExists=|!/etc/ssh/ssh_host_dsa_key
rt=/usr/bin/usbmuxd --user usbmux --systemd
PIDFilVE_ADDRESS
AmbientCapabilities=CAP_NET_RAW
PrivatDescription=RFKill-Unblock %I
After=rfkill-block@atart=/usr/bin/iptables-restore /etc/iptables/iptabs-load.d
ConditionKernelCommandLine=|modulesles-load.d
ConditionDirectoryNotEmpty=|/etc/moduleviceAllow=char-input rw
DeviceAllow=char-tty rw
DeCapabilityBoundingSet=CAP_SYS_ADMIN CAP_MAC_ADMIN ription=firewalld - dynamic firewall daemon
BeforetectKernelModules=yes
MemoryDenyWriteExecute=yes
Ron) any later version.
[Unit]
Description=File Syulti-user.target.wants/wpa_supplicant-wired@%i.sersts=|!/sys/firmware/efi/efivars/LoaderRandomSeed-4riables are not
# actually stored in NVRAM, indepeion ta-server.transport.socket.listen-port=24007
RANGUAGE LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_es, don't start any getty. Note
# that serial getthronized before getty.target, even though
# getty.xit=yes
ExecStart=/usr/bin/systemd-firstboot --pro_SYS_TIME
CapabilityBoundingSet=CAP_SYS_TIME
ExecStateDirectory=systemd/rfkill
TimeoutSec=30s
Type=nt1
ExecStart=/usr/lib/polkit-1/polkitd --no-debug
esktop.UDisks2
ExecStart=/usr/lib/udisks2/udisksd
8)
DefaultDependencies=no
BindsTo=%i.device
Wants=ce]
Type=notify
ExecStart=/usr/bin/virtvboxd --tim
ExecStart=/usr/bin/systemd-tty-ask-password-agentlater version.
[Unit]
Description=Setup Virtual Cad=/usr/bin/avahi-daemon -r
NotifyAccess=main
[Inescription=Avahi mDNS/DNS-SD Stack
Requires=avahi-[Service]
BusName=org.libteam.teamd.%i
ExecExit=yes
ExecStart=/usr/bin/systemd-sysusers
Timeo configured
Condi=no
After=systemd-quotacheck.service
Before=remote.service
RequiresMountsFor=/var/log/journal
[Servmbus/hv_vss
[Service]
ExecStart=/usr/bin/hv_vss_dg UUIDs
Documentation=man:uuidd(8)
Requires=uuidd.
[Install]
WantedBy=multi-user.target
Also=virtlxor some hypervisors.
# A conservative default of 8
# A little optimization under the assumption that=!container
DefaultDependencies=no
Before=time-sye is to run in conjunction with a local NTP servicpendency matters during
# shutdown. We want first lias=multi-user.target.wants/wpa_supplicant@%i.serrotate /etc/logrotate.conf
# performance options
ogrotate.conf(5)
RequiresMountsFor=/var/log
Conditten has up to 4 file
# handles per guest.
# libvirl -HUP -x syncthing
[Install]
WantedBy=sleep.]
Description=Restart Syncthing after resume
Documanager Wait Online
Documentation=man:nm-online(1)
n=LVM2 metadata daemon
Documentation=man:lvmetad(8g/glusterd
ExecStart=/usr/sbin/glusterd -p /var/ruimitNOFILE=524288
[Unit]
Description=USB/IP servers
RestrictRealtime=yes
RestrictSUIDSGID=yes
Socketsinit.target
[Service]
OOMScoreAdjust=-250
Capabi) any later version.
[Unit]
Description=Journal SAP_SETPCAP CAP_NET_RAW CAP_NET_BIND_SERVICE
ExecStemd-networkd.service
Before=network.target nss-looption=Git Daemon Instance
[Service]
User=git
# Thitectures=native
User=systemd-journal-remote
Watch:systemd-journal-remote(8) man:journal-remote.confcommon script that is also used by initscript-baseter=@system-service @mount
WatchdogSec=3min
# Notchined
Wants=machine.slice
After=machine.slice
Reqbilities
CapabilityBoundingSet=
# System call intstrict
# Needed by keyboard backlight support
Prott]
Description=Btrfs scrub on %f
[Service]
Nice=1ername.
ExecStart=-/sbin/agetty -o '-p -- \\u' --kawned during boot then we should make
# sure that e]
Type=notify
ExecStart=/usr/bin/virtproxyd --timystemd will remove it when transitioning from
# inannot see sysfs after root is mounted, so we will er=colord
# We think that udev's AF_NETLINK messagd in by some other unit.
Also=srk-online.target itself is enabled or pulled in by=yes
ProtectSystem=strict
Restart=on-failure
RestaT CAP_NET_RAW
CapabilityBoundingSet=CAP_NET_ADMIN sr/bin/pwck -r || r=1; /usr/bin/grpck -r && exit $Path=/dev/pts/%I
TTYReset=yes
TTYVHangup=yes
KillMt]
Description=Container Getty on /dev/pts/%I
Docuet
[Service]
Type=notify
NotifyAccess=exec
Remainty=/lib/modules/%v/modules.devname
[Serpability=CAP_SYS_MODULE
ConditionFileNotEmpty=/libional service until we factor
# out the code
ExecSiption=Suspend/Resume Running libvirt Guests
Wantsrtlockd
ExecStart=/usr/bin/virtlockd $VIRTLOCKD_ARt]
Description=RealtimeKit Scheduling Policy Serviation, either version 3 of the License, or
# (at yoftware: you can redistribute it and/or modify
# iss-boot good
#Service initializes zram devices
[Unservice(8)
DefaultDependencies=no
Requires=boot-cocket
Also=virtqemud-ro.socket
Also=virtqemud-admince]
Type=notify
ExecStart=/usr/bin/virtqemud --timrget
[Unit]
Description=Virtualization qemu daemon%i
[Unit]
Description=Gluster Events Notifier
AfteICE_MODE=1
ExecStart=/usr/bin/e2scrub -t %I
Syslogrt=/usr/lib/systemd/systemd-update-utmp reboot
Exee online
Documentation=man:netctl.special(7)
Aftert
[Unit]
Description=Virtualization network daemonconf.d/sensord
Type=forking
PIDFile=/var/run/sensocReload=/bin/kill -HUP $MAINPID
KillMode=process
Re
After=xencommons.service
Conflicts=xendomains.seetc
ConditionPathIsMountPoint=/etc/machine-id
[Se:vgchange(8)
Requires=dm-event.socket lvm2-lhots etc. using dmeventd or progress polling
Documescription=Hyper-V file copy service (FCOPY)
Condiflicts=shutdown.target
After=sysinit.target plymou
[Unit]
Description=Assemble FakeRAID arrays
Defauy later version.
[Unit]
Description=Hibernate
DoctyBoundingSet=CAP_SYS_ADMIN
ProtecdemManager1
ExecStart=/usr/bin/ModemManager
StandaMaxSec=5min
StateDirectory=systemd/coredump
System-udevd-kernel.socket
Restart=always
RestartSec=0
El reset the value internally for its workers
OOMSc-update-done.service
ConditionNeedsUpdate=|/etc
Coe state
Documentation=man:netctl.special(7)
BeforendingSet=CAP_SYS_TIME
DeviceAllow=char-rtc r
ExecS# Make sure the DeviceAllow= lines above can work any later version.
[Unit]
Description=Login Servieedesktop.org/wiki/Software/systemd/hostnamed
[Se.target final.target
SuccessAction=poweroff-force
rnal-gatewayd.socket
[Service]
DynamicUser=yes
Exon=Automatic wired network connection using netctlronment=SD_ACTIVATION=1
PIDFile=/run/lvmpolld.pid
ms from /etc/fstab
Documentation=man:fstrim(8)
[S# the --image= option. Add these here, too.
Device sure to keep these policies in sync if you
# chanemd-nspawn(1)
PartOf=machines.target
Before=machinetwork.target
[Service]
Type=dbus
BusName=fi.w1.w
Documentation=man:hwdb(7) man:systemd-hwdb(8)
Defpid-file
ExecReload=/bin/kill -HUP $MAINPID
[Instiption=A lightweight DHCP and caching DNS server
As %t/openvpn-server/status-%i.log --status-versionalways
UtmpIdentifier=cons
TTYPath=/dev/console
TT version.
[Unit]
Description=Console Getty
DocumeessDeny=any
[Unit]
Description=Remote Login Facilir version.
[Unit]
Description=Portable Service Maet/openvpn/wiki/HOWTO
[Service]
Type=notify
Privaork-online.target
Documentation=man:openvpn(8)
DocAP_SETPCAP CAP_DAC_OVERRIDE
NoNewPrivileges=yes
Mes.target
[Service]
ExecStart=-/usr/bin/rshd
Stand90s
[Unit]
Description=Virtualization secret daemo.target
ConditionPathIsReadWrite=/proc/sys/
Condit/www.kernel.org/doc/html/latest/admin-guide/binfmt
[Service]
ExecStart=/usr/bin/ssh-keygen -A
Type=o--nopidfile --systemd-activation --syslog-only
Exeser.target
[Unit]
Description=D-Bus System Message
[Unit]
Description=Network Router Discovery DaemontedBy=default.target
[Unit]
Description=IPv4 Pack Stale Online ext4 Metadata Check Snapshots
Conditrsion.
[Unit]
Description=Load Kernel Modules
Docchar-drm
ExecStartPre=-/sbin/modprobe -abq drm
Exe.freedesktop.org/wiki/Software/systemd/logind
Docu=org.fedoraproject.FirewallD1
KillMode=mixed
[InsNPID
# supress to log debug and error output also ode Information Queries
Documentation=ninfod(8)
Re=/usr/lib/systemd/systemd-quotacheck
TimeoutSec=0
subsystem-net-devices-%i.device
Bed thus probably was missing the random seed file)
there is no system token defined yet, or …
Condstall]
WantedBy=getty.target
DefaultInstance=tty1
blems
# displaying some internationalized messages by serial-getty@.service, not this
# unit.
ConditIsolate=yes
# IgnoreOnIsolate causes issues with ardOutput=tty
StandardInput=tty
StandardError=tty
later version.
[Unit]
Description=First Boot Wiza[Unit]
Description=Network Time Synchronization
Dostemd-rfkill.service(8)
DefaultDependencies=no
Binion=Authorization Manager
Documentation=man:polkitan pages which have not been read in a week.
ExecSpe=oneshot
# Recover from deletion, per FHS.
ExecSrg
[Service]
Type=notify
ExecStart=/usr/bin/virtvocumentation=man:systemd-ask-password-console.servnsole.conf(5)
DefaultDependencies=no
Before=initrdStart=/usr/bin/avahi-daemon -s
ExecRndation, Inc., 59 Temple Place, Suite 330, Boston,ur option) any later version.
#
# avahi is distribdate-done.service
ConditionNeedsUpdate=/etc
[Servr=lm_sensors.service
[Service]
Type=simple
PIDFily later version.
[Unit]
Description=Enable File Snquish-var
Type=oneshot
RemainAfterExit=yes
TimeouSYS_ADMIN
ConditionCapability=CAP_SYS_RAWIO
Documer/sbin/uuidd --socket-activation
Restart=no
User=ue
LockPersonality=yes
MemoryDenyWriteExecute=yes
PExecStart=/usr/lib/systemd/scripts/cpupower
Remainnt).
# eg if we want to support 4096 guests, we'llce]
Type=notify
ExecStart=/usr/bin/virtlxcd --timeown-reboot
[Install]
WantedBy=reboot.target kexecdifications to make it work in the remaining casesYS_TIME itself, but it's primary
# usecase is to remd to not clean up when nm-dispatcher exits
KillMd by
# another service/target), the ordering depenc/etc/wpa_supplicant/wpa_supplicant-%I.conf -i%I
unables for working SELinux with systemd older thasion.
[Unit]
Description=Manage MD Reshape on /deg QEMU
# stdio log), but might be more (eg serial irtlogd
ExecStart=/usr/bin/virtlogd $VIRTLOGD_ARGSbin/systemctl --no-block start initrd-cleanup.servoption) any later version.
[Unit]
Description=RelExecStart=/usr/bin/krb5kdc -n
Restart=always
[Insn.
[Unit]
Description=initctl Compatibility DaemoTIONS
KillMode=process
SuccessExitStatus=15
[Inst.target
[Service]
ExecStart=/usr/bin/usbipd
[Insystemd-journald
FileDescriptorStoreMax=4224
IPAddrOWNER CAP_SETUID CAP_SETGID CAP_MAC_OVERRIDE
Devic/kpropd
StandardInput=socket
StandardError=syslog
tem-service
Type=notify
User=systemd-resolve
WatchxecStart=!!/usr/lib/systemd/systemd-resolved
LockPversion.
[Unit]
Description=Network Name Resolutided=yes
IgnorewPrivileges=on
# The '-' is to ignore non-zero exit statuses
Execo
Conflicts=shutdown.target
After=systemd-fsck-rootectKernelTunables=yes
ProtectSystem=strict
Restriersonality=yes
LogsDirectory=journal/remote
Memorycannot be placed in a mount namespace, since it
# DE CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD
ExecSs
[Service]
BusName=org.freedesktop.machine1
Capaservice
SystemCallFilter=ioprio_get
# Namespaces
work=true would block udev's netlink socket
IPAddr power management
Documentation=man:upowerd(8)
[Srescue.target or starts rescue.service from multi--quit-wait.service getty-pre.target
# If additionet
Also=virtproxyd-ro.socket
Also=virtproxyd-adminthe PIDFile. It isn't necessary (systemd can workin the initramfs (with dracut at least)
# cannot ss
# This file is part of mdadm.
#
# mdadm is freesktop.ColorManager
ExecStart=/usr/lib/colord
Useresktop.network1.service
# We want to enable systeSUIDSGID=yes
RuntimeDirectory=systemd/netif
Runtimis moved to netlink
After=systemd-udevd.service ne later version.
[Unit]
Description=Network Servicsimple
# Always run both checks, but fail the serv option value tells agetty to replace 'login' argunIsolate is an issue: when someone isolates rescueer=paths.target multi-]
Description=Networking for netctl profile %I
Docsr/bin/ftpd -D
ExecStopPost=/usr/bin/rm -f /run/fte=sysinit.target systemd-tmpfiles-setup-dev.servicandardOutput=journal+console
TimeoutStopSec=0
[In=-900
# Needs to allow for max guests * average disr/lib/xfsprogs/xfs_scrub_fail "${EMAIL_ADDR}" %I
ine XFS Metadata Check Failure Reporting for %I
Doived a copy of the GNU General Public License
# al/dhcpcd-%I.pid
ExecStart=/usr/bin/dhcpcd -q -w %I
'[ "$SWAP" = "y" ] && mkswap /dev/%i && swapon /dy as Good
Documentation=man:systemd-bless-boot.ser tasks per guest results in a TasksMax of
# 32k tocally need 8192 FDs
# If changing this, also consiRequires=virtqemud.socket
Requires=virtqemud-ro.soonment=PYTHONPATH=/usr/lib/python3.7/site-packagesetadata Check for %I
OnFailure=e2scrub_fail@%i.sere
Documentation=man:systemd-importd.service(8)
Docndencies=no
RequiresMountsFor=/var/log/wtmp
Conflidate-done.service
ConditionNeedsUpdate=/var
[Serv=virtnetworkd-ro.socket
Requires=virtnetworkd-admit
Also=libvirtd-ro.socket
[Unit]
Description=Log h which are also related to number of guests
LimitNconf.d/libvirtd
ExecStart=/usr/bin/libvirtd $LIBVIe these three .socket units to revert
# to a tradinment=LVM_SUPPRESS_LOCKING_FAILURE_MESSAGES=1
Execption=Monitoring of LVM2 mirrors, snapshots etc. ud-sulogin-shell rescue
Type=idle
StandardInput=ttyry=-/root
ExecStartPre=-/bin/plymouth --wait quit
ter=systemd-udev-settle.service
Before=basic.targe]
Type=simple
ExecStart=/usr/bin/ndctl monitor
[Iue
PrivateTmp=true
RestrictAddressFamilies=AF_NETLnl80211@%i.service
[Unit]
Description=Hyper-V key-A supplicant daemon (interface- and nl80211 driverce=9
NoNewPrivileges=yes
OOMScoreAdjust=500
Privatore Dump
Documentation=man:systemd-coredump(8)
DefmCallFilter=@system-service @module @raw-io
Systempe=notify
# Note that udev also adjusts the OOM sct
RemainAfterExit=yes
ExecStart=/sbin/ldconfig -X
hcpcd.pid
Exnetctl restore
ExecStop=/usr/bin/netctl store
[Int=
ExecStart=/usr/lib/systemd/systemd-localed
IPAdter version.
[Unit]
Description=Time & Date Servins systemd/seats systemd/users systemd/inhibit sysiceAllow=char-drm rw
DeviceAllow=char-input rw
Devet
[Service]
BusName=org.freedesktop.login1
Capabostname1
CapabilityBoundingSet=CAP_SYS_ADMIN
ExecSr/bin/nft flush ruleset
Remaition=Netfilter Tables
Documentation=man:nft(8)
Wannal-gateway
# If t=/usr/lib/systemd/systemd-journal-gatewayd
LockPece
Documentation=man:systemd-journal-gatewayd(8)
Rss=all
ExecStart=/usr/bin/ifplugd -i %I -r /etc/ificts=shutdown.target
After=sysroot.mount
Before=instem-service
[Unit]
Description=LVM2 poll daemon
Dion=Discard unused blocks on filesystems from /etc=block-blkext rw
# nspawn can set up LUKS encrypt strict device policy, similar to the one nspawn clve the 'block-loop' expression (and others)
ExecSlicant1
ExecStart=/usr/bin/wpa_supplicant -u
[Insebuild Hardware Database
Documentation=man:hwdb(7))
[Service]
Type=dbus
BusName=uk.org.thekelle %i.conf
CapabilityBoundingSet=CAP_IPC_LOCK CAP_NEnity.openvpn.net/openvpn/wiki/Openvpn24ManPage
Docption=A daemon which can be used to alert you in t OCI containers may be run without a console
Condiarget
[Service]
ExecStart=-/usr/bin/rlogind
Standystemd-portabled
BusName=org.freedesktop.portable1tion=man:tmpfiles.d(5) man:systemd-tmpfiles(8)
Defmp=true
WorkingDirectory=/etc/openvpn/client
ExecSsounds/freedesktop/stereo/system-bootup.oga
[ServKNOD CAP_SETFCAP CAP_SYS_ADMIN CAP_SETPCAP CAP_DAtop.import1
WatchdogSec=3min
KillMode=mixed
Capabi
Also=virtsecretd-ro.socket
Also=virtsecretd-adminmpty=|/run/binfmt.d
[Serb/binfmt.d
ConditionDirectoryNotEmpty=|/etc/binfmt://www.kernel.org/doc/html/latest/admin-guide/binfConditionPathExists=|!/etc/ssh/ssh_host_rsa_key
Cofor the usbmux protocol used by Apple devices
DocuND_ADDRESS $RECEIVE_ADDRESS
AmbieExecStart=/usr/bin/rdisc -f -t $OPTIONS $SEND_ADDRall -A -r
SyslogIdentifier=%N
RemainAfterExit=no
m=true
ProtectHome=read-only
PrivateTmp=yes
Ambienstemd-modules-load.service(8) man:modules-load.d(5trictSUIDSGID=yes
RuntimeDirectory=systemd/sessionlow=block-* r
DeviceAllow=char-/dev/console rw
Devn:systemd-logind.service(8) man:logind.conf(5)
Docrget
Alias=dbus-org.fedoraproject.FirewallD1.serviflicts=iptables.service ip6tables.service ebtableset
[Service]
ExecStart=/usr/bin/ninfod -d
Ambienget
ConditionPathExists=/usr/bin/quotacheck
[Servlicant/wpa_supplicant-wired-%I.conf -Dwired -i%I
loader didn't pass the OS a random seed (and thus y run this if the boot loader can support random sarbiter.vol --brick-port 24007 --xlator-option ta-HUP=yes
# Unset locale for the console getty sincice]
# the VT is cleared by TTYVTDisallocate
# Thet this is synchronized before getty.target, even t-prompt-locale --prompt-timezone --pce sysinit.target shutdown.target
ConditionPathIsRion=Suspend
Documentation=man:systemd-suspend.servneshot
ExecStart=/usr/bin/systemctl --force kexec
.target
Alias=dbus-org.freedesktop.timesync1.serviDocumentation=man:systemd-timesyncd.service(8)
Coni
TimeoutSec=90s
StateDirectory=systemd/backlight
]
Description=Load/Save RF Kill Switch Status
Docut=/usr/bin/netctl-auto start %I
Exeesktop.PolicyKit1
ExecStart=/usr/lib/polkit-1/polkn -type f -name *.gz -atime +6 -delete
# RegeneratcStart=+/usr/bin/install -d -o root -g root -m 075onflicts=libvirtd.service
Requires=virtvboxd.socke]
Description=Dispatch Password Requests to Consolutdown.target
ConditionPathExists=/dev/tty0
[Serv]
WantedBy=multi-user.target
Also=avahi-daemon.soc Public
# License along with avahi; if not, write tion; either version 2 of the
# License, or (at yoCreate System Users
Documentation=man:sysusers.d(5ncontrol.pid
ExecStart=/usr/sbin/fancontrol
[Instug
[Unit]
Description=Start fan control, if configvice]
ExecStart=/usr/bin/journalctl --flush
ExecStv_vss_daemon @io-event @network-io
[Install]
Also=uuidd.socke
User=uuidd
Group=uuidd
ProtectSystem=strict
Protee=yes
StateDirectory=systemd/journal-upload
Supple/systemd/systemd-journal-upload --save-state
LockP[Unit]
Description=Apply cpupower configuration
[ailure
# At least 1 FD per guest, often 2 (eg qemuo.socket
Requires=virtlxcd-admin.socket
Wants=systard freedesktop theme
ConditionPathExists=|/usr/shhe general case, and leave it to local
# modificatscription=Wait Until Kernel Time Synchronized
DocureJobMode=replace-irreversibly
AllowIsolate=yes
[y later version.
[Unit]
Description=Switch Root
Datcher
# We want to allow scripts to spawn long-rotectKernelModules=true
ProtectSystem=full
Restriystemd.exec.html
# no ProtectHome for userdir logillMode=none
[Unit]
Description=Rotate log files
Dconsole logs)
# A common case is OpenStack which oit]
Description=Virtual machine log manager
Requirdaemon-reload
# we have to retrigger initrd-fs.tarencies=no
Requires=initrd-root-fs.target
After=iniStart=/usr/bin/nm-online -s -q --timeout=30
Remaind-initctl.service(8)
DefaultDependencies=no
[Servip6tables.rules
ExecStop=/usr/lib/systemd/scripts/un/glusterd.pid --log-level $LOG_LEVEL $GLUSTERD_
Documentation=man:glusterd(8)
Requires=rpcbind.se
RestrictAddressFamilies=AF_UNIX AF_NETLINK
RestriCAP_SYSLOG CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_CHs 5 propagation server
Conflicts=krb5-kpropd.servirate network units from Kernel command line
Defaulr.target
Alias=dbus-org.freedesktop.resolve1.servi.target
Conflicts=shutdown.target
Wants=nss-lookupki/Software/systemd/writing-resolver-clients
Defauib/systemd/systemd-user-runtime-dir stop %i
Type=osessions.service dbus.service
StopWhenUnneeded=yesaemon --inetd --export-all --base-path=/srv/git
Stfreedesktop.org/wiki/Software/systemd/APIFileSyste4288
[Install]
Also=systemd-journal-remote.socketar/log/journal/remote/
LockPersonality=yes
LogsDiron=RFKill-Block %I
After=rfkill-unblock@all.servicder to implement the
# "machinectl bind" operationExecStart=/usr/lib/systemd/systemd-machined
IPAddr=Virtual Machine and Container Registration Servicivilege escalation
NoNewPrivileges=true
# Capabil/lib/upower
StateDirectory=upower
ProtectHome=true
KillSignal=SIGINT
ExecStart=/usr/bin/btrfs scrub ty.target didn't actually pull it in.
Beforeion=http://0pointer.de/blog/projects/serial-consolsr/lib/systemd/systemd-networkd-wait-online
RemainaultDependencies=no
Conflicts=shutdown.target
Reququires=virtproxyd.socket
Requires=virtproxyd-ro.so/bin/spice-webdavd -p 9843 $SPICE_WEBDAVD_EXTRA_ARr complain due to lack of a platform,
# that is mdltered when
# network namespacing is on.
# Privatetion=Manage, Install and Generate Color Profiles
target, so enabling it only has an effect if
# net_UNIX AF_NETLINK AF_INET AF_INET6 AF_PACKET
Restrirvice can be dropped once tuntap is moved to netli/modprobe -qabr $BUS_MODULES $HWMON_MODULES
[Instption=Initialize hardware monitoring sensors
[Seroclear --keep-baud pts/%I 115200,38400,9600 $TERM
.target,
# tradition expects that we shut down allworkd.service NetworkManager.service connman.servir=true
Documentation=man:xfs_scrub_all(8)
After=pa8) man:talk(1)
[Service]
User=nobody
Group=tty
Exption=Create list of static device nodes for the cart=/usr/lib/libvirt/libvirt-guests.sh start
ExecSd), so make
# sure we discourage OOM killer
OOMSco/bin/kill -USR1 $MAINPID
# Loosing the locks is a meKit. If not, see <http://www.gnu.org/licenses/>. implied warranty of
# MERCHANTABILITY or FITNESS 'echo 1 > /sys/class/block/%i/reset'
iption=Setup zram based device %i
After=dev-%i.devption=Mark the Current Boot Loader Entry as Good
Dcan limit the number of tasks started by
#.service
# limits which are also related to numberINPID
KillMode=control-group
PIDFile=/var/run/glusption=Activate md array %I even though degraded
Dee=oneshot
WorkingDirectory=/
PrivateNetwork=true
Pny later version.
[Unit]
Description=Reboot
Documreedesktop.org/wiki/Software/systemd/importd
[Serman:systemd-update-utmp.service(8) man:utmp(5)
DefUnit]
Description=Update UTMP about System Boot/Shr the enabled netctl profiles to come online
Docum
[Unit]
Description=Rebuild Journal Catalog
Docume$MAINPID
Restart=on-failure
KillMode=process
[Ins/sensord -i $INTERVAL -l $LOG_INTERVAL -f daemon
itNOFILE=8192
# The cgroups pids controller can lit
After=dbus.service
After=iscsid.service
After=aplockd.socket
# Use Wants instead of Requires so thiption=Commit a transient machine-id on disk
Documbin/lvm vgchange --monitor y --ignoreskippedclusten=man:dmeventd(8) man:lvcreate(8) man:lvchange(8) rvice]
ExecStart=/usr/bin/hv_fcopy_daemon -n
[Insption=Rescue Shell
Documentation=man:sulogin(8)
Desr/bin/dmraid --ignorelocking --activate y -Z
Remantainer
Documentation=man:systemd.special(7)
Defaubernate
[Unit]
Description=Ndctl Monitor Daemon
[oneshot
ExecStart=/usr/bin/systemctl --force halt
get
Alias=dbus-org.freedesktop.ModemManager1.serviwpa_supplicant-nl80211-%I.conf -Dnl80211 -i%I
[In
RuntimeMaxSec=5min
StateDirectory=systemd/coredumxecStart=-/usr/lib/systemd/systemd-coredump
IPAddr) any later version.
[Unit]
Description=Process ChdogSec=3min
TasksMax=infinity
PrivateMounts=yes
POOM score internally and will reset the value inten=man:ldconfig(8)
Defit]
Description=Rebuild Dynamic Linker Cache
Documrget
[Service]
Type=forking
PIDFile=/run/dhcpcd.pny later version.
[Unit]
Description=Locale Servition=(Re)store the netctl profile state
Documfreedesktop.org/wiki/Software/systemd/localed
[Ses=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
Sy:systemd-timedated.service(8) man:localtime(5)
DocmCallFilter=@system-service
WatchdogSec=3min
# InotectSystem=strict
ReadWritePaths=/etc /run
RestarWNER CAP_SYS_TTY_CONFIG CAP_LINUX_IMMUTABLE
Devicestemd/multiseat
Wants=user.slice
After=nss-user-loSystemCallFilter=@system-service sethostname
Watch:hostname(5) man:machine-info(5)
Doclater version.
[Unit]
Description=Hostname ServicxecStart=/usr/bin/nft -f /etc/nftables.conf
ExecRearallel.
LimitNOFILE=524288
[Install]
Also=systemtime=yes
SupplementaryGroups=systemd-journal
Systeifplugd/netctl.action -bfIns
[Insce
After=sys-subsystem-net-devices-%i.device netwotems
Documentation=man:systemd-volatile-root.servitation=man:lvmpolld(8)
Requires=lvm2-lvmpolld.sockion=OpenSSH Daemon
Wants=sshdgenkeys.serviw=/dev/mapper/control rw
DeviceAllow=block-device-stemd-nspawn --quiet --keep-unit --boot --link-joue DeviceAllow= lines below can properly resolve th=yes
ExecStart=/usr/bin/systemd-hwdb update
Timeoulib/udev/hwdb.bin
ConditionPathExists=|/etc/udev/hsmasq -k --enable-dbus --user=dnsmasq --pid-file
ET_WRITE
LimitNPROC=10
DeviceAllow=/dev/null rw
Devsr/bin/openvpn --status %t/openvpn-server/status-%in the event of a hardware health monitoring alarmymouth-quit-wait.service
Before=getty.target
# OCET6
SystemCallFilter=@system-service @mount
SystemCHROOT CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_CHcts=shutdown.target
After=local-fs.target time-sen.
[Unit]
Description=Cleanup of Temporary Directpn --suppress-timestamps --nobind --config %i.confn=OpenVPN tunnel for %I
After=syslog.target networty=yes
[Unit]
Description=Play Bootup Sound
Defaulystemd-importd
BusName=org.freedesktop.import1
Watd=/bin/kill -HUP $MAINPID
Restart=on-failure
[Insires=virtsecretd.socket
Requires=virtsecretd-ro.soautomount
After=proc-sys-fs-binfmt_misc.mount
BefoDescription=Set Up Additional Binary Formats
DocumonPathExists=|!/etc/ssh/ssh_host_ed25519_key
Condir/bin/dbus-send --print-reply --system --type=methMessage Bus
Documentation=man:dbus-daemon(1)
Requi=-/etc/sysconfig/rdisc
ExecStart=/usr/bin/rdisc -fN CAP_SYS_RAWIO
NoNewPrivileges=yes
User=root
IOScodules-load
ConditionKernelCommandLine=|rd.modulesCAP_SYS_MODULE
ConditionDirectoryNotEmpty=|/lib/moo allow many simultaneous logins since
# we keep oyPreserve=yes
StateDirectory=systemd/linger
Systemn work correctly when referenceing char-drm
ExecStlice
# Ask for the dbus socket.
Wants=dbus.socketutput=null
StandardError=null
Type=d/firewalld --nofork --nopid $FIREWALLD_ARGS
ExecReiption=Respond to IPv6 Node Information Queries
Dotem Quota Check
Documentation=man:systemd-quotache
Alias=multi-user.target.wants/wpa_supplicant-wireinterface- and wired driver-specific version)
Requxists=/sys/firmware/efi/efivars/LoaderFeatures-4a6
Documentation=man:systemd-boot-system-token.servi --volfile-id ta -f /var/lib/glusterd/thin-arbiterRestartSec=0
UtmpIdentifier=%I
TTYPath=/dev/%I
TTYrvice
# On systems without virtual consoles, don's with sulogin, if someone isolates
# rescue.targeer version.
[Unit]
Description=Getty on %I
Documeot Wizard
Documentation=man:systemd-firstboot(1)
D
ExecStart=/usr/lib/systemd/systemd-sleep suspend
[Unit]
Description=Reboot via kexec
Documemesync
WatchdogSec=3min
[Install]
WantedBy=sysinimd/timesync
StateDirectory=systemd/timesync
Systemts=shutdown.target
Wants=time-set.target time-syncart=/usr/lib/systemd/systemd-backlight load %i
Exes of %i
Documentation=man:systemd-backlight@.servidsTo=sys-devices-virtual-misc-rfkill.device
Confliin/netctl-auto clean %I
[Install]
WantedBy=sys-suscription=Automatic wireless network connection us5 /var/cache/man
# Expunge old catman pages which mentation=man:mandb(8)
ConditionACPower=true
[Serit]
Description=Resume from hibernation using devid-agent --watch --console
Systearget emergency.service
After=plymouth-start.servirtual Console
Documentation=man:systemd-vconsole-smon.socket
Alias=dbus-org.freedesktop.Avahi.servic ANY WARRANTY; without even the implied warranty osr/bin/teamd -U -D -o -t %i -f /run/teamd/%i.conf
Unit]
Description=Team Daemon for device %I
BeforeFileNotEmpty=/etc/fancontrol
After=lm_sensors.servile System Quotas
Documentation=man:quotaon(8)
Def=/usr/bin/journalctl --smart-relinquish-var
Type=ocription=Flush Journal to Persistent Storage
Documption=Hyper-V volume shadow copy service (VSS)
Connit]
Description=Daemon for generating UUIDs
Documtectures=native
User=systemd-journal-upload
Watchdsion.
[Unit]
Description=Journal Remote Upload Seeshot
EnvironmentFile=/etc/default/cpupower
ExecSt, we'll typically need 8192 FDs
# If changing thise
Requires=virtlxcd.socket
Requires=virtlxcd-ro.so-/usr/bin/canberra-boot system-shutdown-reboot
[Iemd-time-wait-sync
TimeoutStartSec=infinity
Remainervice independently is desired, but let's
# make =no
ConditionPathExists=/etc/initrd-release
OnFail so tell
# systemd to not clean up when nm-disppatcher
# is D-Bus activate (and not intended to by want the dbus version instead.
[Service]
Type=sgClass=best-effort
IOSchedulingPriority=7
# hardeStart=/sbin/mdadm --grow --continue /dev/%I
Standarvice written to expect 4096 guests, so if we
# gus is a really bad thing that will
# cause the machcy.target
OnFailureJobMode=replace-irreversibly
Coion=Reload Configuration from the Real Root
Defauld -f
Environment=SD_ACTIVATION=1
Restart=on-abort
simple
NonBlocking=true
ExecStart=/usr/bin/lvmetadcReload=/usr/bin/ip6tables-restoDescription=IPv6 Packet Filtering Framework
Beforeption=GlusterFS, a clustered file-system server
Doemd-journald-audit.socket
StandardOutput=null
Systrnald-dev-log.socket systemd-journald-audit.sockettion=Kerberos 5 propagation server
Conflicts=krb5-=/usr/lib/systemd/systemd-network-generator
[InstIDSGID=yes
RuntimeDirectory=systemd/resolve
Runtimes=CAP_SETPCAP CAP_NET_RAW CAP_NET_BIND_SERVICE
Caystemd/writing-network-configuration-managers
Docue=oneshot
RemainAfterExit=yes
Slice=user-%i.slice
/user/%i
Documentation=man:user@.service(5)
After=tandardOutput=inherit
StandardError=journal
Protec
[Unit]
Description=Remount Root and Kernel File Slot of fds to access them
# all in parallel.
Limitournal-remote --listen-https=-3 --output=/var/log/=oneshot
ExecStart=/usr/bin/rfkill block %I
[Instncommitted netcf network config change transactionF_NETLINK AF_INET AF_INET6
RestrictRealtime=yes
Sy/systemd/machined
Wants=machine.slice
After=machin memory
LimitMEMLOCK=0
[Install]
WantedBy=graphiclModules=true
# Real-time
RestrictRealtime=true
p-baud 115200,38400,9600 %I $TERM
Type=idle
Restaror safety, and then
# the entered username.
ExecSttional gettys are spawned during boot then we shouuires=systemd-networkd.servescription=Wait for Network to be Configured
Documce
After=local-fs.target
Documentation=man:libvirtiption=webdav daemon for Spice guests
Requires=dbu-offroot --takeover' don't hurt when
# not necessa
Description=MD Metadata Monitor on /dev/%I
Defauliption=Clean the %f mount point
Before=%i.mount
Biservice whenever this service
# is enabled. system_NET_RAW
DeviceAllow=char-* rw
ExecStart=!!/usr/liDMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NEr/bin/sensors -s
ExecStop=-/sbin/modprobe -qabr $B-/sbin/modprobe -qab $BUS_MODULES $HWMON_MODULES
EI
TTYPath=/dev/pts/%I
TTYReset=yes
TTYVHangup=yes
on=man:agetty(8) man:systemd-getty-generator(8)
Dort=/usr/bin/xfs_scrub_all
SyslogIdentifier=xfs_scription=Online XFS Metadata Check for All Filesystebin/kmod static-nodes --format=tmpfiles --output=/r the current kernel
DefaultDependencies=no
Before-guests
# Hack just call traditional service untile machine to be fenced (rebooted), so make
# sure %I
User=mail
Group=mail
SupplementaryGroups=systeoundingSet=CAP_SYS_NICE CAP_DAC_READ_SEARCH CAP_SYe for more details.
#
# You should have received ayright 2010 Lennart Poettering
#
# RealtimeKit is tart=-/bin/sh -c 'echo $ZRAM_NUM_STR > /sys/class/
After=local-fs.target boot-complete.target
Conflimains for some hypervisors.
# A conservative defaueg qemu monitor + qemu agent).
# eg if we want to stemd-machined.service
Before=libvirt-guests.servisys/devices/virtual/block/%i/md/sync_action
[ServClass=idle
CPUSchedulingPolicy=idle
Environment=SEt.service(8)
DefaultDependencies=no
Requires=shutdtion=Virtual Machine and Container Download Servicservice systemd-tmpfiles-setup.service auditd.servecStart=/usr/lib/netctl/network wait-online
[InstcStart=/usr/bin/journalctl --update-catalog
Timeout
Also=virtnetworkd.socket
Also=virtnetworkd-ro.so]
Type=notify
ExecStart=/usr/bin/virtnetworkd --tilt of 8 tasks per guest results in a TasksMax of
#
# the daemon, which can limit the number of domai
After=remote-fs.target
After=systemd-logind.servivation deployment setup
Wants=libvirtd.socket
Want
Documentation=man:systemd-machine-id-commit.servi-event.service lvm2-lvmetad.socket lvm2-activationon that we are using the
# standard freedesktop thget
# A little optimization under the assumption HOME=/root
WorkingDirectory=-/root
ExecStartPre=-/rget
SuccessAction=exit-force
[Unit]
Description=Arsion.
[Unit]
Description=Exit the Container
DocuDependencies=no
Requires=sleep.target
After=sleep.cription=Halt
Documentation=man:systemd-halt.serviLINK AF_UNIX
NoNewPrivileges=true
User=root
[Instalue pair (KVP)
ConditionPathExists=/dev/vmbus/hv_arget
# NetworkManager users will probably want te=yes
Nice=9
NoNewPrivileges=yes
OOMScoreAdjust=50ocess Core Dump
Documentation=man:systemd-coredumpst=-1000
Sockets=systemd-udevd-control.socket systvice Manager
Documentation=man:systemd-udevd.servietc
ConditionFileNotEmpty=|!/etc/ld.so.cache
[Serin/dhcpcd -q -b
ExecStop=/usr/bin/dhcpcd -x
[Inst[Unit]
Description=dhcpcd on all interfaces
Wants=.freedesktop.locale1
CapabilityBoundingSet=
ExecStrExit=yes
ExecStart=-/usr/bin/netctl restore
ExecStem-service
WatchdogSec=3min
[Unit]
Description=(Rystemd-localed.service(8) man:locale.conf(5) man:vERM
SystemCallFilter=@system-service @clock
Watchd/wiki/Software/systemd/timedated
[Service]
BusNam keep one fd open per session.
LimitNOFILE=524288
essions systemd/seats systemd/users systemd/inhibid/systemd-logind
FileDescriptorStoreMax=512
IPAddruser-lookup.target user.slice
# Ask for the dbus etc
RestrictAddressFamilies=AF_UNIX
Restris=yes
ProtectSystem=strict
ReadWritePaths=/etc
Restation=man:systemd-hostnamed.service(8) man:hostnar/bin/nft flush ruleset ';' include '"/etc/nftableany split up journal files we need a lot of fds to=systemd-journal-gatewayd.socket
[Service]
Dynamiersion.
[Unit]
Description=Journal Gateway Servicpecial(7)
Requisite=multi-user.target
BindsTo=sys-scription=Enforce Volatile Root File Systems
DocumCallFilter=@default @file-system @basic-io @systemtart=/sbin/fstrim --fstab --verbose --quiet
Protecpawn itself needs access to /dev/loop-control and =machine.slice
Delegate=yes
TasksMax=16384
# Enfod.service
RequiresMountsFor=/var/lib/machines
[Seser.target
Alias=dbus-fi.w1.wpa_supplicant1.servictemd-update-done.service
ConditionNeedsUpdate=/etchekelleys.dnsmasq
ExecStartPre=/usr/bin/dnsmasq --w
DeviceAllow=/dev/net/tun rw
ProtectSystem=true
Pttps://community.openvpn.net/openvpn/wiki/HOWTO
[ronment (-p), followed by '--' for safety, and thehe '-o' option value tells agetty to replace 'logistrictAddressFamilies=AF_UNIX AF_NETLINK AF_INEt=CAP_KILL CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_SETGID-tmpfiles --clean
SuccessExitStatus=DATAERR
IOScheirectories
Documentation=man:tmpfiles.d(5) man:sys_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDExists=/usr/share/sounds/freedesktop/stereo/system-ictAddressFamilies=AF_UNIX AF_INET AF_INET6
SystemngSet=CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CA
Description=Remote Shell Facilities Server
After=fter=apparmor.service
After=local-fs.target
DocumeionDirectoryNotEmpty=|/usr/local/lib/binfmt.d
Condan:systemd-binfmt.service(8) man:binfmt.d(5)
DocumathExists=|!/etc/ssh/ssh_host_ecdsa_key.pub
Conditfreedesktop.DBus.ReloadConfig
OOMScoreAdjust=-900
mespaces=yes
SystemCallArchitectures=native
LockPey Daemon
Documentation=man:rdisc(8)
Requires=netwoment=SERVICE_MODE=1
ExecStart=/usr/bin/e2scrub_allption=Remove Stale Online ext4 Metadata Check Snap/lib/modules-load.d
ConditionDirectoryNotEmpty=|/un
# Increase the default a bit in order to allow bit systemd/shutdown
RuntimeDirectoryPreserve=yes
y rw
DeviceAllow=char-vcs rw
# Make sure the Devic_ADMIN CAP_AUDIT_CONTROL CAP_CHOWN CAP_DAC_READ_SEe=org.fedoraproject.FirewallD1
KillMode=mixed
[InFile=-/etc/conf.d/firewalld
ExecStart=/usr/bin/firlities=CAP_NET_RAW
DynamicUser=yes
PrivateTmp=yes
uotacheck.service(8)
DefaultDependencies=no
After=sr/bin/wpa_supplicant -c/etc/wpa_supplicant/wpa_suiption=WPA supplicant daemon (interface- and wired-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f
# Only run tion=Store a System Token in an EFI Variable
Docum
[Service]
Environment="LOG_LEVEL=WARNING"
ExecSttart=-/sbin/agetty -o '-p -- \\u' --noclear %I $TEn' arguments with an
# option to preserve environmBefore=getty.target
IgnoreOnIsolate=yes
# IgnoreOone --prompt-root-password
StandardOutput=tty
StanPathIsReadWrite=/etc
ConditionFirstBoot=yes
[Serviption=Suspend
Documentation=man:systemd-suspend.sown.target umount.target final.target
After=shutdoervice @clock
Type=notify
User=systemd-timesync
WactSystem=strict
Restart=always
RestartSec=0
Restrime-sync.target
[Service]
AmbientCapabilities=CAP_emd/systemd-backlight save %i
TimeoutSec=90s
Stateiption=Load/Save Screen Backlight Brightness of %ies=yes
StateDirectory=systemd/rfkill
TimeoutSec=30op=/usr/bin/netctl-auto stop %I
ExecStopPost=/usr/ netctl profiles
Documentation=man:netctl.special( --quiet
User=root
Nice=19
IOSchedulingClass=idle
ion=man:systemd-hibernate-resume@.service(8)
Defauvirtvboxd-ro.socket
Also=virtvboxd-admin.socket
# iption=Virtualization vbox daemon
Conflicts=libvirefore=shutdown.target
ConditionPathExists=!/run/plnsole-setup.service(8) man:vconsole.conf(5)
Defauleload=/usr/bin/avahi-daemon -r
NotifyAccess=main
ITNESS FOR A PARTICULAR PURPOSE. See the GNU Genertributed in the hope that it will be useful, but Wore=sysinit.target shutdown.target systemd-update-DFile=/var/run/fancontrol.pid
ExecStart=/usr/sbin/mainAfterExit=yes
ExecStart=/usr/bin/quotaon -aug
temd-remount-fs.service
Before=systemd-tmpfiles-sean:systemd-journald.service(8) man:journald.conf(5tionACPower=true
ConditionCapability=CAP_SYS_ADMINeDevices=yes
PrivateNetwork=yes
PrivateUsers=yes
Pe=yes
ProtectHostname=yes
ProtectKernelModules=yesntation=man:systemd-journal-upload(8)
Wants=networ 32k to support 4096 guests.
TasksMax=32768
[Instocess
Restart=on-failure
# At least 1 FD per guest --timeout 120
ExecReload=/bin/kill -HUP $MAINPID
t kexec.target
Also=canberra-system-shutdown.servity=CAP_SYS_TIME
ConditionVirtualization=!container)
# Note that this tool doesn't need CAP_SYS_TIMEusr/bin/systemctl --no-block switch-root /sysroot
all]
Alias=dbus-org.freedesktop.nm-dispatcher.servription=Network Manager Script Dispatcher Service
n)
Requires=sys-subsystem-net-devices-%i.device
Afte=true
PrivateDevices=true
PrivateTmp=true
Protece(8) man:logrotate.conf(5)
RequiresMountsFor=/var/:
LimitNOFILE=16384
[Install]
Also=virtlogd.sockeefore=libvirtd.service
Documentation=man:virtlogd(ibly
ConditionPathExists=/etc/initrd-release
[Serter=initrd-root-fs.target
OnFailure=emergency.targntedBy=network-online.target
[Unit]
Description=KeewPrivileges=yes
NotifyAccess=all
SystemCallArchitcripts/iptables-flush 6
RemainAfterExit=yes
[Insts-restore /etc/iptables/ip6tables.rules
ExecReloade=notify
WatchdogSec=3min
# If there are many sples=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
Spendencies=no
Requires=systemd-journald.socket
Aftsr/bin/kpropd
StandardInput=socket
StandardError=siption=Generate network units from Kernel command =EPERM
SystemCallFilter=@system-service
Type=notif
CapabilityBoundingSet=CAP_SETPCAP CAP_NET_RAW CAPesolution
Documentation=man:systemd-resolved.servi/systemd-user-runtime-dir start %i
ExecStop=/usr/lription=User Runtime Directory /run/user/%i
Documeal-fs.target shutdown.target
Wants=local-fs-pre.taleSystems
DefaultDependencies=no
Conflicts=shutdowProtectKernelTunables=yes
ProtectSystem=strict
Resmp=yes
ProtectControlGroups=yes
ProtectHome=yes
Pription=RFKill-Block %I
After=rfkill-unblock@all.seBefore=NetworkManager.service
[Service]
# call co
IPAddressDeny=any
LockPersonality=yes
MemoryDenyWttps://www.freedesktop.org/wiki/Software/systemd/mspaces
PrivateUsers=yes
RestrictNamespaces=yes
# ddressDeny=any
RestrictAddressFamilies=AF_UNIX AF_s
KillMode=process
IgnoreSIGPIPE=no
SendSIGHUP=yesser.target or
# graphical.target.
Conflicts=rescue-%i.device systemd-user-sessions.service plymouth-ce]
Type=oneshot
ExecStart=/usr/lib/systemd/systemon=man:systemd-networkd-wait-online.service(8)
Deflibvirtd(8)
Documentation=https://libvirt.org
[Seres=dbus.service avahi-daemon.service
After=dbus.s=initrd-switch-root.target
[Service]
# mdmon shouU General Public License as published by
# the Fr
After=local-fs.target
[Service]
ExecStart=-/usr/lArchitectures=native
SystemCallErrorNumber=EPERM
ryDenyWriteExecute=yes
NoNewPrivileges=yes
ProtectonCapability=CAP_NET_ADMIN
DefaultDependencies=no
.1+
#
# This file is part of systemd.
#
# systemword and group files
After=systemd-sysusers.servicervice
Before=rescue.service
[Service]
# The '-o'er version 2.1 of the License, or
# (at your optiedistribute it and/or modify it
# under the termsnetwork-pre.target
Before=network.target netctl.setarget
[Service]
Type=forking
PIDFile=/run/ftpd.pndation; either version 2.1 of the License, or
#
# SPDX-License-Identifier: LGPL-2.1+
#
# This fes=virt-guest-shutdown.target
After=network.targetkd.socket
Requires=virtlockd-admin.socket
Before=lb/rtkit-daemon
Type=dbus
BusName=org.freedesktop.Rnse as published by
# the Free Software Foundation# This file is part of RealtimeKit.
#
# Copyright pe=oneshot
RemainAfterExit=yes
EnvironmentFile=-/ue terms of the GNU Lesser General Public License a systemd is free software; you can redistribute ito consider virtlogd.service & virtlockd.service
# eventsd.pid
[Install]
WantedBy=multi-user.target