43 lines
1.2 KiB
SYSTEMD
43 lines
1.2 KiB
SYSTEMD
|
[Unit]
|
||
|
|
Description=Berkeley Open Infrastructure Network Computing Client
|
||
|
|
Documentation=man:boinc(1)
|
||
|
|
After=network-online.target
|
||
|
|
|
||
|
|
[Service]
|
||
|
|
Environment=GPU_SINGLE_ALLOC_PERCENT=100
|
||
|
|
Environment=GPU_MAX_HEAP_SIZE=100
|
||
|
|
Environment=GPU_FORCE_64BIT_PTR=1
|
||
|
|
Environment=GPU_USE_SYNC_OBJECTS=1
|
||
|
|
Environment=GPU_MAX_ALLOC_PERCENT=100
|
||
|
|
Type=simple
|
||
|
|
ProtectHome=true
|
||
|
|
PrivateTmp=true
|
||
|
|
#ProtectSystem=strict
|
||
|
|
#ProtectControlGroups=true
|
||
|
|
ReadWritePaths=-/var/lib/boinc -/etc/boinc-client
|
||
|
|
Nice=10
|
||
|
|
User=boinc
|
||
|
|
WorkingDirectory=/var/lib/boinc
|
||
|
|
ExecStart=/usr/bin/boinc
|
||
|
|
ExecStop=/usr/bin/boinccmd --quit
|
||
|
|
ExecReload=/usr/bin/boinccmd --read_cc_config
|
||
|
|
ExecStopPost=/bin/rm -f lockfile
|
||
|
|
IOSchedulingClass=idle
|
||
|
|
# The following options prevent setuid root as they imply NoNewPrivileges=true
|
||
|
|
# Since Atlas requires setuid root, they break Atlas
|
||
|
|
# In order to improve security, if you're not using Atlas,
|
||
|
|
# Add these options to the [Service] section of an override file using
|
||
|
|
# sudo systemctl edit boinc-client.service
|
||
|
|
#NoNewPrivileges=true
|
||
|
|
#ProtectKernelModules=true
|
||
|
|
#ProtectKernelTunables=true
|
||
|
|
#RestrictRealtime=true
|
||
|
|
#RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
|
||
|
|
#RestrictNamespaces=true
|
||
|
|
#PrivateUsers=true
|
||
|
|
#CapabilityBoundingSet=
|
||
|
|
#MemoryDenyWriteExecute=true
|
||
|
|
|
||
|
|
[Install]
|
||
|
|
WantedBy=multi-user.target
|