Implement governed S1 backup recovery loop
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018
This commit is contained in:
parent
40e295e3bd
commit
295bf43d54
16 changed files with 1623 additions and 95 deletions
|
|
@ -0,0 +1,18 @@
|
|||
[Unit]
|
||||
Description=Encrypted Railiance S1 operating-system backup
|
||||
Documentation=file:///usr/local/lib/railiance-infra/s1-backup/spec/s1-backup.yaml
|
||||
After=local-fs.target
|
||||
ConditionPathIsReadWrite=/opt/backup/railiance/infra
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
ExecStart=/usr/local/sbin/railiance-backup-s1
|
||||
User=root
|
||||
Group=root
|
||||
UMask=0077
|
||||
Nice=10
|
||||
PrivateTmp=true
|
||||
NoNewPrivileges=true
|
||||
ProtectSystem=strict
|
||||
ProtectHome=true
|
||||
ReadWritePaths=/opt/backup/railiance/infra
|
||||
Loading…
Add table
Add a link
Reference in a new issue