github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-07 09:40:44 +00:00
Code Issues Projects Releases Wiki Activity

scripts: remove falco.target and use require falcoctl with Wants=

Browse Source 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
This commit is contained in:
Andrea Terzolo
2023-01-23 11:27:47 +01:00
committed by poiana
parent 9b7ab105d8
commit 7ed5f39da0
11 changed files with 70 additions and 79 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
scripts/systemd/falco-bpf.service
View File

@@ -1,7 +1,8 @@
[Unit]
Description=Falco: Container Native Runtime Security with ebpf
Documentation=https://falco.org/docs/
PartOf=falco.target
Before=falcoctl-artifact-follow.service
Wants=falcoctl-artifact-follow.service
Conflicts=falco-kmod.service
Conflicts=falco-modern-bpf.service
Conflicts=falco-plugin.service
@@ -25,4 +26,4 @@ RestrictAddressFamilies=~AF_PACKET
StandardOutput=null
[Install]
WantedBy=multi-user.target
WantedBy=multi-user.target

5
scripts/systemd/falco-kmod.service
View File

@@ -3,7 +3,8 @@ Description=Falco: Container Native Runtime Security with kmod
Documentation=https://falco.org/docs/
After=falco-kmod-inject.service
Requires=falco-kmod-inject.service
PartOf=falco.target
Before=falcoctl-artifact-follow.service
Wants=falcoctl-artifact-follow.service
Conflicts=falco-bpf.service
Conflicts=falco-modern-bpf.service
Conflicts=falco-plugin.service
@@ -27,4 +28,4 @@ RestrictAddressFamilies=~AF_PACKET
StandardOutput=null
[Install]
WantedBy=multi-user.target
WantedBy=multi-user.target

5
scripts/systemd/falco-modern-bpf.service
View File

@@ -1,7 +1,8 @@
[Unit]
Description=Falco: Container Native Runtime Security with modern ebpf
Documentation=https://falco.org/docs/
PartOf=falco.target
Before=falcoctl-artifact-follow.service
Wants=falcoctl-artifact-follow.service
Conflicts=falco-kmod.service
Conflicts=falco-bpf.service
Conflicts=falco-plugin.service
@@ -24,4 +25,4 @@ RestrictAddressFamilies=~AF_PACKET
StandardOutput=null
[Install]
WantedBy=multi-user.target
WantedBy=multi-user.target

5
scripts/systemd/falco-plugin.service
View File

@@ -1,7 +1,8 @@
[Unit]
Description=Falco: Container Native Runtime Security with plugin
Documentation=https://falco.org/docs/
PartOf=falco.target
Before=falcoctl-artifact-follow.service
Wants=falcoctl-artifact-follow.service
Conflicts=falco-kmod.service
Conflicts=falco-bpf.service
Conflicts=falco-modern-bpf.service
@@ -24,4 +25,4 @@ RestrictAddressFamilies=~AF_PACKET
StandardOutput=null
[Install]
WantedBy=multi-user.target
WantedBy=multi-user.target

7
scripts/systemd/falco.target
View File

@@ -1,7 +0,0 @@
[Unit]
Description=Main Falco target
Requires=multi-user.target
After=multi-user.target
[Install]
WantedBy=multi-user.target

5
scripts/systemd/falcoctl-artifact-follow.service
View File

@@ -1,9 +1,7 @@
[Unit]
Description=Falcoctl Artifact Follow: automatic artifacts update service
Documentation=https://falco.org/docs/
After=falco.target
BindsTo=falco.target
DefaultDependencies=no
PartOf=falco-bpf.service falco-kmod.service falco-modern-bpf.service falco-plugin.service
[Service]
Type=simple
@@ -18,7 +16,6 @@ NoNewPrivileges=yes
ProtectSystem=true
ProtectKernelTunables=true
RestrictRealtime=true
StandardOutput=null
[Install]
WantedBy=multi-user.target