]> git.ipfire.org Git - thirdparty/systemd.git/blame - units/systemd-networkd.service.in
Merge pull request #10495 from poettering/login-boot-hookup
[thirdparty/systemd.git] / units / systemd-networkd.service.in
CommitLineData
a7df2d1e
ZJS
1# SPDX-License-Identifier: LGPL-2.1+
2#
f579559b
TG
3# This file is part of systemd.
4#
5# systemd is free software; you can redistribute it and/or modify it
6# under the terms of the GNU Lesser General Public License as published by
7# the Free Software Foundation; either version 2.1 of the License, or
8# (at your option) any later version.
9
10[Unit]
11Description=Network Service
12Documentation=man:systemd-networkd.service(8)
689d781b 13ConditionCapability=CAP_NET_ADMIN
f579559b 14DefaultDependencies=no
5f004d1e 15# systemd-udevd.service can be dropped once tuntap is moved to netlink
696fc836 16After=systemd-udevd.service network-pre.target systemd-sysusers.service systemd-sysctl.service
689d781b
LP
17Before=network.target multi-user.target shutdown.target
18Conflicts=shutdown.target
f579559b
TG
19Wants=network.target
20
21[Service]
c61f302d 22AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW
3ca9940c
LP
23CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW
24ExecStart=!!@rootlibexecdir@/systemd-networkd
25LockPersonality=yes
26MemoryDenyWriteExecute=yes
27NoNewPrivileges=yes
0c28d51a 28ProtectControlGroups=yes
3ca9940c 29ProtectHome=yes
99894b86 30ProtectHostname=yes
b6c7278c 31ProtectKernelModules=yes
3ca9940c
LP
32ProtectSystem=strict
33Restart=on-failure
34RestartSec=0
0c28d51a 35RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6 AF_PACKET
3ca9940c
LP
36RestrictNamespaces=yes
37RestrictRealtime=yes
c61f302d
YW
38RuntimeDirectory=systemd/netif
39RuntimeDirectoryPreserve=yes
3ca9940c
LP
40SystemCallArchitectures=native
41SystemCallErrorNumber=EPERM
42SystemCallFilter=@system-service
43Type=notify
44User=systemd-network
45WatchdogSec=3min
c4a0b20c
JD
46
47[Install]
48WantedBy=multi-user.target
5544ee85 49Also=systemd-networkd.socket
fb369a5b 50Alias=dbus-org.freedesktop.network1.service
9e496560
ZJS
51
52# We want to enable systemd-networkd-wait-online.service whenever this service
53# is enabled. systemd-networkd-wait-online.service has
54# WantedBy=network-online.target, so enabling it only has an effect if
55# network-online.target itself is enabled or pulled in by some other unit.
56Also=systemd-networkd-wait-online.service