diff --git a/Makefile b/Makefile index ffb78e64..21957261 100644 --- a/Makefile +++ b/Makefile @@ -78,6 +78,8 @@ endif install-wasm: @install -p -m 550 bin/wasm-sandboxer ${DEST_DIR}${BIN_DIR}/wasm-sandboxer + @install -d -m 750 ${DEST_DIR}${SYSTEMD_SERVICE_DIR} + @install -p -m 640 wasm/service/kuasar-wasm.service ${DEST_DIR}${SYSTEMD_SERVICE_DIR}/kuasar-wasm.service install-quark: @install -p -m 550 bin/quark-sandboxer ${DEST_DIR}${BIN_DIR}/quark-sandboxer diff --git a/wasm/service/kuasar-wasm.service b/wasm/service/kuasar-wasm.service new file mode 100644 index 00000000..796a92d4 --- /dev/null +++ b/wasm/service/kuasar-wasm.service @@ -0,0 +1,16 @@ +[Unit] +Description=Kuasar Wasm sandboxer daemon process +After=network.target + +[Service] +Type=simple +ExecStart=/usr/local/bin/wasm-sandboxer --listen /run/wasm-sandboxer.sock --dir /run/kuasar-wasm +LimitNOFILE=1048576 +LimitNPROC=infinity +LimitCORE=infinity +Delegate=yes +KillMode=process + +[Install] +WantedBy=multi-user.target +