mirror of
https://github.com/ceph/ceph
synced 2024-12-20 10:23:24 +00:00
5659920c7c
we do not encourage user to run multiple cluster using different
cluster name since 8fe460e756, and
the recommended way is to use cephadm. see also
https://docs.ceph.com/en/latest/rados/configuration/common/#naming-clusters-deprecated,
so let's stop passing `--cluster` in systemd service units. there
are more places where we are still feeding this optoin to command line
tools or services. we should do the cleanup piecemeal to reduce the
potential risk.
FWIW, if not specified, the cluster name is "ceph" by default.
Signed-off-by: Kefu Chai <tchaikov@gmail.com>
36 lines
1002 B
SYSTEMD
36 lines
1002 B
SYSTEMD
[Unit]
|
|
Description=Ceph cluster manager daemon
|
|
PartOf=ceph-mgr.target
|
|
After=network-online.target local-fs.target time-sync.target
|
|
Before=remote-fs-pre.target ceph-mgr.target
|
|
Wants=network-online.target local-fs.target time-sync.target remote-fs-pre.target ceph-mgr.target
|
|
|
|
[Service]
|
|
EnvironmentFile=-@SYSTEMD_ENV_FILE@
|
|
ExecReload=/bin/kill -HUP $MAINPID
|
|
ExecStart=/usr/bin/ceph-mgr -f --id %i --setuser ceph --setgroup ceph
|
|
LimitNOFILE=1048576
|
|
LimitNPROC=1048576
|
|
LockPersonality=true
|
|
NoNewPrivileges=true
|
|
PrivateDevices=yes
|
|
PrivateTmp=true
|
|
ProtectControlGroups=true
|
|
ProtectHome=true
|
|
ProtectHostname=true
|
|
ProtectKernelLogs=true
|
|
ProtectKernelModules=true
|
|
ProtectKernelTunables=true
|
|
ProtectSystem=full
|
|
Restart=on-failure
|
|
RestartSec=10
|
|
RestrictSUIDSGID=true
|
|
StartLimitBurst=3
|
|
StartLimitInterval=30min
|
|
# We need to disable this protection as some python libraries generate
|
|
# dynamic code, like python-cffi, and require mmap calls to succeed
|
|
MemoryDenyWriteExecute=false
|
|
|
|
[Install]
|
|
WantedBy=ceph-mgr.target
|