From fa04ad94adcb68cc1ea9f62ce6be53d5a2c3d1a2 Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Fri, 31 Dec 2021 02:57:42 +0100 Subject: newer versions of smartmontools have nvme support and need additional privileges --- .../node/templates/textfile-collector-scripts/smartmon.service.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'roles/monitoring') diff --git a/roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/smartmon.service.j2 b/roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/smartmon.service.j2 index a630088c..8ee60c02 100644 --- a/roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/smartmon.service.j2 +++ b/roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/smartmon.service.j2 @@ -9,8 +9,8 @@ ExecStart=bash -o pipefail -c "/usr/local/share/prometheus-node-exporter/smartmo TimeoutStartSec=30s # systemd hardening-options -AmbientCapabilities=CAP_SYS_RAWIO -CapabilityBoundingSet=CAP_SYS_RAWIO +AmbientCapabilities=CAP_SYS_RAWIO CAP_SYS_ADMIN +CapabilityBoundingSet=CAP_SYS_RAWIO CAP_SYS_ADMIN LockPersonality=true MemoryDenyWriteExecute=true NoNewPrivileges=true -- cgit v1.2.3