File fah-client.service of Package fah-client-bastet-beta

Overview Repositories Revisions Requests Users Attributes Meta

File fah-client.service of Package fah-client-bastet-beta

[Unit]
Description=Folding@Home V7 Client
Documentation=https://foldingathome.org/support/faq/installation-guides/linux/
After=syslog.target network-online.target remote-fs.target
Wants=network-online.target

[Service]
Type=simple
User=fah-client
Group=fah-client
RuntimeDirectory=fah-client
RuntimeDirectoryMode=0755
PIDFile=/run/fah-client/fah-client.pid
WorkingDirectory=/var/lib/fah-client
EnvironmentFile=-/etc/sysconfig/fah-client
ExecStart=/usr/bin/fah-client /etc/fah-client/config.xml $FAHCLIENT_OPTIONS
ExecStartPost=/bin/sh -c "echo $MAINPID >/run/fah-client/fah-client.pid"
ExecStop=/bin/kill $MAINPID
KillMode=process
NoNewPrivileges=True
CPUSchedulingPolicy=idle
ProtectSystem=strict
#ProtectClock=yes
ProtectControlGroups=yes
ProtectKernelLogs=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectHostname=yes
ReadWritePaths=/var/lib/fah-client/ /etc/fah-client/
# /tmp holds source files for nvcc required for CUDA on Nvidia GPUs
PrivateTmp=True
ProtectHome=True
# fah-client downloads and executes closed-source folding cores.
# Some paranoia won't hurt by limiting the permitted syscalls as far as possible.
SystemCallFilter=getpgrp geteuid setpgid mprotect futex rt_sigprocmask madvise gettid getpid set_tid_address rt_sigaction restart_syscall set_robust_list sched_yield sched_get_priority_max sched_get_priority_min fsync sysinfo accept4 wait4 eventfd2 pipe2 sched_getaffinity sched_setaffinity setpriority prlimit64 uname brk ioctl pipe socket setsockopt accept bind listen sendto shutdown pselect6 select recvfrom connect poll recvmsg getrandom mremap @basic-io @file-system @process fdatasync epoll_create1 epoll_wait epoll_ctl mbind get_mempolicy sigaltstack
SystemCallErrorNumber=EPERM
SystemCallArchitectures=native
CapabilityBoundingSet=
RestrictAddressFamilies=AF_UNIX AF_INET
RemoveIPC=yes
RestrictNamespaces=yes
RestrictSUIDSGID=yes
RestrictRealtime=yes
PrivateUsers=yes
LockPersonality=yes

[Install]
WantedBy=multi-user.target

# Use `systemctl edit fah-client` to add the following (uncommented) lines to your service.
#
## In GPU only operation, the 'FAHCore_xx' process burns CPU power in a busy
## loop. Using CPUAffinity the process 'fah-client' and it's childs can be
## assigned to a single core. The clock frequency of this CPU can then be limited
## to save power without affecting folding performance (see `man systemd.exec`).
#[Service]
# ExecStartPre=+sh -c 'for c in 0 6; do cd /sys/bus/cpu/drivers/processor/cpu$c/cpufreq/ && cat cpuinfo_min_freq > scaling_max_freq; done'
# CPUAffinity=0,6
# ExecStop=+sh     -c 'for c in 0 6; do cd /sys/bus/cpu/drivers/processor/cpu$c/cpufreq/ && cat cpuinfo_max_freq > scaling_max_freq; done'

Places

File fah-client.service of Package fah-client-bastet-beta

Places