From c1a6f3bb8eb7ff05a97e09c8ebf1766a249936af Mon Sep 17 00:00:00 2001 From: "Dustin C. Hatch" Date: Sun, 7 Aug 2022 21:26:49 -0500 Subject: [PATCH] package/v-m: Remove DynamicUser from systemd units None of the Victoria Metrics services should run as a dynamic user. Indeed, enabling the setting appears to have no effect when `User` is defined and refers to a user that already exists. To reduce confusion, we should omit these directives from the unit files. --- package/victoriametrics/victoria-metrics.service | 1 - package/victoriametrics/vmagent.service | 1 - package/victoriametrics/vmalert.service | 1 - 3 files changed, 3 deletions(-) diff --git a/package/victoriametrics/victoria-metrics.service b/package/victoriametrics/victoria-metrics.service index c9dbc84..9331c16 100644 --- a/package/victoriametrics/victoria-metrics.service +++ b/package/victoriametrics/victoria-metrics.service @@ -19,7 +19,6 @@ LimitNOFILE=1048576 CapabilityBoundingSet= DeviceAllow= DevicePolicy=closed -DynamicUser=yes IPAddressAllow=localhost IPAddressDeny=any LockPersonality=yes diff --git a/package/victoriametrics/vmagent.service b/package/victoriametrics/vmagent.service index 6e52c17..656f876 100644 --- a/package/victoriametrics/vmagent.service +++ b/package/victoriametrics/vmagent.service @@ -19,7 +19,6 @@ ReadWritePaths=/var/lib/victoria-metrics CapabilityBoundingSet= DeviceAllow= DevicePolicy=closed -DynamicUser=yes IPAddressAllow=localhost IPAddressDeny=any LockPersonality=yes diff --git a/package/victoriametrics/vmalert.service b/package/victoriametrics/vmalert.service index 6a91e2f..66513b4 100644 --- a/package/victoriametrics/vmalert.service +++ b/package/victoriametrics/vmalert.service @@ -18,7 +18,6 @@ LimitNOFILE=1048576 CapabilityBoundingSet= DeviceAllow= DevicePolicy=closed -DynamicUser=yes IPAddressAllow=localhost IPAddressDeny=any LockPersonality=yes