@treydock i wanted to get your recommendation about the cgroup exporter systemd service file, currently i have this set for my cgroup exporter. I came across this file https://github.com/treydock/cgroup_exporter/blob/master/packaging/rpm/cgroup_exporter.service do i need all of the parameters in particular
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
ProtectHome=yes
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
RestrictNamespaces=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
MemoryDenyWriteExecute=yes
LockPersonality=yes
RemoveIPC=yes
CapabilityBoundingSet=
SystemCallFilter=@system-service
The systemd file i have is the following
# /etc/systemd/system/cgroup_exporter.service
[Unit]
Description=Cgroup Exporter
Wants=network-online.target
After=network-online.target
[Service]
User=cgroup_exporter
Group=cgroup_exporter
Type=simple
ExecStart=/usr/local/bin/cgroup_exporter --config.paths /user.slice,/slurm --web.listen-address:19306
[Install]
WantedBy=multi-user.target
@treydock i wanted to get your recommendation about the cgroup exporter systemd service file, currently i have this set for my cgroup exporter. I came across this file https://github.com/treydock/cgroup_exporter/blob/master/packaging/rpm/cgroup_exporter.service do i need all of the parameters in particular
The systemd file i have is the following