File prometheus-node_exporter.service of Package golang-github-prometheus-node_exporter

[Unit]
Description=Prometheus exporter for machine metrics
Documentation=https://github.com/prometheus/node_exporter
Wants=network-online.target
After=network-online.target

[Service]
Restart=always
User=prometheus
EnvironmentFile=-/etc/sysconfig/prometheus-node_exporter
ExecStart=/usr/bin/node_exporter $ARGS
ExecReload=/bin/kill -HUP $MAINPID
TimeoutStopSec=20s
SendSIGKILL=no

# various hardening options
AmbientCapabilities=
CapabilityBoundingSet=
DevicePolicy=auto
KeyringMode=private
LockPersonality=yes
MemoryDenyWriteExecute=yes
MountFlags=private
NoNewPrivileges=yes
PrivateDevices=no
PrivateIPC=yes
PrivateTmp=yes
PrivateUsers=no
ProcSubset=all
ProtectClock=no
ProtectControlGroups=yes
ProtectHome=yes
ProtectHostname=yes
ProtectKernelLogs=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectSystem=strict
RemoveIPC=yes
RestrictNamespaces=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
SystemCallArchitectures=native
SystemCallFilter=~ @cpu-emulation @debug @keyring @module @mount @raw-io @reboot @swap @obsolete splice @chown @pkey @setuid @timer

[Install]
WantedBy=multi-user.target
openSUSE Build Service is sponsored by