diff options
| author | Christian Pointner <equinox@spreadspace.org> | 2021-12-31 02:57:42 +0100 |
|---|---|---|
| committer | Christian Pointner <equinox@spreadspace.org> | 2021-12-31 02:57:42 +0100 |
| commit | fa04ad94adcb68cc1ea9f62ce6be53d5a2c3d1a2 (patch) | |
| tree | 0fa4504b03eb68a114902d2d9d5742e46d8adf52 /roles/monitoring | |
| parent | ch-phoebe/prometheus: deactivate sensors textfile collector for now (diff) | |
newer versions of smartmontools have nvme support and need additional privileges
Diffstat (limited to 'roles/monitoring')
| -rw-r--r-- | roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/smartmon.service.j2 | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/smartmon.service.j2 b/roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/smartmon.service.j2 index a630088c..8ee60c02 100644 --- a/roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/smartmon.service.j2 +++ b/roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/smartmon.service.j2 @@ -9,8 +9,8 @@ ExecStart=bash -o pipefail -c "/usr/local/share/prometheus-node-exporter/smartmo TimeoutStartSec=30s # systemd hardening-options -AmbientCapabilities=CAP_SYS_RAWIO -CapabilityBoundingSet=CAP_SYS_RAWIO +AmbientCapabilities=CAP_SYS_RAWIO CAP_SYS_ADMIN +CapabilityBoundingSet=CAP_SYS_RAWIO CAP_SYS_ADMIN LockPersonality=true MemoryDenyWriteExecute=true NoNewPrivileges=true |