github.com/prysmaticlabs/prysm@v1.4.4/beacon-chain/package/prysm-beacon-chain.service (about)

     1  [Unit]
     2  Description=Prysm Ethereum Beacon Chain
     3  Wants=network-online.target
     4  After=network-online.target
     5  
     6  [Service]
     7  User=prysm-beacon
     8  Group=prysm-beacon
     9  Type=simple
    10  ExecStart=/usr/bin/beacon-chain --config-file /etc/prysm/beacon-chain.yaml --accept-terms-of-use
    11  
    12  NoNewPrivileges=yes
    13  CapabilityBoundingSet=
    14  SystemCallArchitectures=native
    15  SystemCallFilter=@system-service
    16  
    17  PrivateDevices=yes
    18  PrivateUsers=yes
    19  PrivateTmp=yes
    20  
    21  ProtectSystem=strict
    22  ReadWritePaths=/var/lib/prysm/beacon-chain
    23  ProtectClock=yes
    24  ProtectHome=true
    25  ProtectKernelLogs=yes
    26  ProtectKernelModules=yes
    27  ProtectKernelTunables=yes
    28  ProtectHostname=yes
    29  ProtectControlGroups=yes
    30  
    31  RestrictNamespaces=yes
    32  RestrictRealtime=yes
    33  RestrictSUIDSGID=yes
    34  RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK
    35  
    36  [Install]
    37  WantedBy=multi-user.target