clawverse/clawstor
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

systemd: whitelist XDG state path in shipped unit #29

Merged
osobh merged 1 commits from systemd-xdg-readwritepaths into main 2026-07-12 14:45:23 +00:00
Conversation 0 Commits 1 Files Changed 1
+4 -1
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
systemd/clawstor-cluster.service
+4 -1
View File
@@ -30,7 +30,10 @@ ProtectSystem=strict
ProtectHome=read-only ProtectHome=read-only
# The blob-store root + hot/warm dirs are the only writable paths. # The blob-store root + hot/warm dirs are the only writable paths.
# Adjust via drop-in when your dirs live outside `%h/clawstor-deploy`. # Adjust via drop-in when your dirs live outside `%h/clawstor-deploy`.
ReadWritePaths=%h/clawstor-deploy # v1 daemon still writes projects.toml + related state under XDG.
# %h/.local/state/claw-store is created on first run; the systemd
# unit needs to whitelist it under ProtectHome=read-only.
ReadWritePaths=%h/clawstor-deploy %h/.local/state/claw-store
PrivateTmp=yes PrivateTmp=yes
[Install] [Install]