add systemd service and timer

stendler · May 7, 2023 · a18a55e · a18a55e
1 parent 61b56b8
commit a18a55e
Show file tree

Hide file tree

Showing 2 changed files with 32 additions and 0 deletions.
diff --git a/container-check-update.service b/container-check-update.service
@@ -0,0 +1,21 @@
+[Unit]
+Description=Container update check 
+Requires=podman.socket
+Wants=network-online.target
+After=network-online.target
+RequiresMountsFor=%t/containers
+
+[Service]
+Type=oneshot
+ExecStart=/usr/bin/podman run --rm \
+    --volume=%t/podman:/run/podman:z \
+    --log-driver=journald \
+    --security-opt label=disable \
+    localhost/container-check-update
+SuccessExitStatus=0 2
+
+# Hardening
+ProtectSystem=full
+PrivateTmp=true
+MemoryDenyWriteExecute=true
+NoNewPrivileges=true
diff --git a/container-check-update.timer b/container-check-update.timer
@@ -0,0 +1,11 @@
+[Unit]
+Description=Daily container update check
+
+[Timer]
+OnCalendar=*-*-* 19:00:00
+AccuracySec=1h
+RandomizedDelaySec=5m
+#Persistent=true
+
+[Install]
+WantedBy=timers.target