Download this file
| 1 | # Region HA spec 2 §5 step 5.3: the relay from a joining box's sandboxed |
| 2 | # agent to root's half of joining. The agent (User=carlos, |
| 3 | # ProtectSystem=strict) sees the console's invitation but cannot write /etc |
| 4 | # or arm the host lifecycle guard; it touches this marker and root does the |
| 5 | # rest, as carlos-system-update.path relays a self-update. Root takes |
| 6 | # nothing from the marker: it reads and verifies the invitation itself. |
| 7 | [Unit] |
| 8 | Description=carlos joining: arm the host lifecycle guard on agent request |
| 9 | |
| 10 | [Path] |
| 11 | PathChanged=/data/system-join-requested |
| 12 | Unit=carlos-system-join.service |
| 13 | |
| 14 | [Install] |
| 15 | WantedBy=multi-user.target |
| 16 | |
amadan