12 Commits (605b497108999fc322cce17a1d1f0c1b0a0a5f33)

Author	SHA1	Message	Date
Richard Fuchs	8d6e649e7e	MT#55283 actually grant the capabilities ... Capabilities listed in the ambient set must also be included in the bounding set. Change-Id: Iac8a97f6ba4f5446430ec2678092f768aeb8bb25 Related-to: I172bd30c9fbe488574e9cc015ba552e805c95fe6	2 years ago
Michael Prokop	91169cc152	TT#157800 Add CAP_CHOWN capabilities to recording-daemon ... Otherwise new recordings won't have expected owner/group, when running rtpengine as its own user Change-Id: I8a6cf123a5467a412c1b2c3ea6c8db7fddc9dc2d	4 years ago
Richard Fuchs	a3062b5f73	TT#14008 install binaries in /usr/bin ... Neither main daemons nor auxiliary tools require root privileges to run, therefore they should go into /usr/bin instead of /usr/sbin. Change-Id: I22fd0f4e622df0362a686dfe9e0ce1fb86b43a9e	4 years ago
Richard Fuchs	30c2de8e0f	TT#157800 run rtpengine as non-root ... *) Create dedicated rtpengine user in postinst and remove it in postrm. *) Use RuntimeDirectory= systemd unit config. *) Use dedicated user for /proc interface and set file umask to hide it from other users. *) Set owner and permissions on default directories used for call recording. Change-Id: I8e225b36d065d46da2489fb8286916371950f490	4 years ago
Richard Fuchs	30c124ff05	TT#124273 use symlinks instead of Install/Alias for aliases ... The aliases created by systemd under Install/Alias are created and removed as the service is enabled and disabled, and don't serve as generic alias names. Furthermore they seem to linger behind when the package is removed or replaced, which leads to collisions and installation failures when the NGCP-specific package is replaced by the non-NGCP version. Change-Id: I2313ffffb1fa4fb1d570b23113b0618744c58e26	4 years ago
Richard Fuchs	690b8d946e	TT#60300 add LimitNOFILE to recording daemon systemd unit ... closes #791 Change-Id: Iedf2353d7415b0b8e11f001217471007d2ff6de8	7 years ago
Richard Fuchs	354f75490d	TT#45617 add no-log-timestamps option ... Log lines written to stderr that are consumed by journald will already have timestamps added to them. Drop the redundant unixtime output for this use case. Change-Id: I34886a69a0ef90de2eb84ee8f446cbad624302c1	7 years ago
Guillem Jover	048b6ed191	TT#50752 Add ngcp-service aliases in systemd service files ... These are names used in the ngcp-service nsservices.yml file, adding them here makes using the system more consistent. Change-Id: I66b0149cbfe70d2260a6c50617a52e53604256da	7 years ago
Guillem Jover	5ba52952c0	TT#42906 Add systemd notify support ... Change-Id: Iba046fa3e36654cedb73203eb06a9d768720a6b0	7 years ago
Guillem Jover	0224a49162	TT#40459 Move the rtpengine NFS mount point into its own systemd unit ... We do not use a proper mount unit because that requires the mount point to be encoded in the filename which is variable and depends on the value coming from config.yml. Change-Id: Ibb637c533c94bc3db119111460ca647a50a205af	7 years ago
Guillem Jover	79807a9c2e	TT#26264 Use better systemd native units ... While still not the ideal implementation, this is certainly better than the sysvinit script wrapper. We then will "only" need to move the setup scripts into proper service files later on. Change-Id: I990d6847117a4b91a8365a5e307fd96cf5b1899f	8 years ago
Guillem Jover	aee2a27c3e	TT#26264 Add systemd service wrappers for the init scripts ... Properly switching to native systemd service files is too intrusive for these services at this point of the release cycle. Let's use this hack for now, and then convert these to the serveral .service, and .mount units required. Change-Id: I8f66bfd8be5924232bf2c34d42b18d2a332db3ee	8 years ago