highperfocused/raspiblitz
1
0
Fork 0
mirror of https://github.com/raspiblitz/raspiblitz.git synced 2025-09-27 20:16:22 +02:00
Code Issues Packages Projects Releases Wiki Activity

lnd.service: avoid hanging on stop #2827

Browse Source
This commit is contained in:
openoms
2021-12-21 15:33:41 +00:00
parent 58ae87e3cb
commit 02425de990
2 changed files with 4 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
home.admin/assets/lnd.service
View File

@@ -14,7 +14,8 @@ After=bitcoind.service
[Service] [Service]
ExecStartPre=-/home/admin/config.scripts/lnd.check.sh prestart mainnet ExecStartPre=-/home/admin/config.scripts/lnd.check.sh prestart mainnet
ExecStart=/usr/local/bin/lnd --configfile=/home/bitcoin/.lnd/lnd.conf ExecStart=/usr/local/bin/lnd --configfile=/home/bitcoin/.lnd/lnd.conf
ExecStop=/usr/local/bin/lncli stop # avoid hanging on stop
# ExecStop=/usr/local/bin/lncli stop
PIDFile=/home/bitcoin/.lnd/lnd.pid PIDFile=/home/bitcoin/.lnd/lnd.pid
User=bitcoin User=bitcoin
@@ -39,21 +40,16 @@ StandardError=journal
# Hardening Measures # Hardening Measures
#################### ####################
# Mount /usr, /boot/ and /etc read-only for the process. # Mount /usr, /boot/ and /etc read-only for the process.
ProtectSystem=full ProtectSystem=full
# Disallow the process and all of its children to gain # Disallow the process and all of its children to gain
# new privileges through execve(). # new privileges through execve().
NoNewPrivileges=true NoNewPrivileges=true
# Use a new /dev namespace only populated with API pseudo devices # Use a new /dev namespace only populated with API pseudo devices
# such as /dev/null, /dev/zero and /dev/random. # such as /dev/null, /dev/zero and /dev/random.
PrivateDevices=true PrivateDevices=true
# Deny the creation of writable and executable memory mappings. # Deny the creation of writable and executable memory mappings.
MemoryDenyWriteExecute=true MemoryDenyWriteExecute=true
PrivateTmp=true PrivateTmp=true
[Install] [Install]

8
home.admin/config.scripts/lnd.install.sh
View File

@@ -289,7 +289,8 @@ EnvironmentFile=/mnt/hdd/raspiblitz.conf
ExecStartPre=-/home/admin/config.scripts/lnd.check.sh prestart ${CHAIN} ExecStartPre=-/home/admin/config.scripts/lnd.check.sh prestart ${CHAIN}
ExecStart=/usr/local/bin/lnd --configfile=/home/bitcoin/.lnd/${netprefix}lnd.conf ExecStart=/usr/local/bin/lnd --configfile=/home/bitcoin/.lnd/${netprefix}lnd.conf
ExecStop=/usr/local/bin/lncli -n=${CHAIN} --rpcserver localhost:1${rpcportmod}009 stop # avoid hanging on stop
# ExecStop=/usr/local/bin/lncli -n=${CHAIN} --rpcserver localhost:1${rpcportmod}009 stop
PIDFile=/home/bitcoin/.lnd/${netprefix}lnd.pid PIDFile=/home/bitcoin/.lnd/${netprefix}lnd.pid
User=bitcoin User=bitcoin
@@ -313,21 +314,16 @@ StandardError=journal
# Hardening Measures # Hardening Measures
#################### ####################
# Mount /usr, /boot/ and /etc read-only for the process. # Mount /usr, /boot/ and /etc read-only for the process.
ProtectSystem=full ProtectSystem=full
# Disallow the process and all of its children to gain # Disallow the process and all of its children to gain
# new privileges through execve(). # new privileges through execve().
NoNewPrivileges=true NoNewPrivileges=true
# Use a new /dev namespace only populated with API pseudo devices # Use a new /dev namespace only populated with API pseudo devices
# such as /dev/null, /dev/zero and /dev/random. # such as /dev/null, /dev/zero and /dev/random.
PrivateDevices=true PrivateDevices=true
# Deny the creation of writable and executable memory mappings. # Deny the creation of writable and executable memory mappings.
MemoryDenyWriteExecute=true MemoryDenyWriteExecute=true
PrivateTmp=true PrivateTmp=true
[Install] [Install]