sys-utils/fstrim.service.in

   1 [Unit]
   2 Description=Discard unused blocks on filesystems from /etc/fstab
   3 Documentation=man:fstrim(8)
   4 ConditionVirtualization=!container
   5
   6 [Service]
   7 Type=oneshot
   8 ExecStart=@sbindir@/fstrim --fstab --verbose --quiet
   9 ProtectSystem=strict
  10 ProtectHome=read-only
  11 PrivateDevices=no
  12 PrivateNetwork=yes
  13 PrivateUsers=no
  14 ProtectKernelTunables=yes
  15 ProtectKernelModules=yes
  16 ProtectControlGroups=yes
  17 MemoryDenyWriteExecute=yes
  18 SystemCallFilter=@default @file-system @basic-io @system-service