github.com/prysmaticlabs/prysm@v1.4.4/validator/package/prysm-validator.service (about)

     1  [Unit]
     2  Description=Prysm Ethereum Validator Client
     3  Wants=network-online.target
     4  After=network-online.target
     5  Requires=prysm-beacon-chain.service
     6  
     7  [Service]
     8  User=prysm-validator
     9  Group=prysm-validator
    10  Type=simple
    11  ExecStart=/usr/bin/validator --config-file /etc/prysm/validator.yaml --accept-terms-of-use
    12  
    13  NoNewPrivileges=yes
    14  CapabilityBoundingSet=
    15  SystemCallArchitectures=native
    16  SystemCallFilter=@system-service
    17  
    18  PrivateDevices=yes
    19  PrivateUsers=yes
    20  PrivateTmp=yes
    21  
    22  ProtectSystem=strict
    23  ReadWritePaths=/var/lib/prysm/validator
    24  ProtectClock=yes
    25  ProtectHome=true
    26  ProtectKernelLogs=yes
    27  ProtectKernelModules=yes
    28  ProtectKernelTunables=yes
    29  ProtectHostname=yes
    30  ProtectControlGroups=yes
    31  
    32  RestrictNamespaces=yes
    33  RestrictRealtime=yes
    34  RestrictSUIDSGID=yes
    35  RestrictAddressFamilies=AF_INET AF_INET6
    36  
    37  [Install]
    38  WantedBy=multi-user.target