[Unit]

Description=Ceph object storage daemon osd.%i

PartOf=ceph-osd.target

After=network-online.target local-fs.target time-sync.target

Before=remote-fs-pre.target ceph-osd.target

Wants=network-online.target local-fs.target time-sync.target remote-fs-pre.target ceph-osd.target

[Service]

Environment=CLUSTER=ceph

EnvironmentFile=-@SYSTEMD_ENV_FILE@

ExecReload=/bin/kill -HUP $MAINPID

ExecStart=/usr/bin/ceph-osd -f --cluster ${CLUSTER} --id %i --setuser ceph --setgroup ceph

ExecStartPre=@CMAKE_INSTALL_FULL_LIBEXECDIR@/ceph/ceph-osd-prestart.sh --cluster ${CLUSTER} --id %i

LimitNOFILE=1048576

LimitNPROC=1048576

LockPersonality=true

MemoryDenyWriteExecute=true

# Need NewPrivileges via `sudo smartctl`

NoNewPrivileges=false

PrivateTmp=true

ProtectControlGroups=true

ProtectHome=true

ProtectHostname=true

ProtectKernelLogs=true

ProtectKernelModules=true

# flushing filestore requires access to /proc/sys/vm/drop_caches

ProtectKernelTunables=false

ProtectSystem=full

Restart=on-failure

RestartSec=10

RestrictSUIDSGID=true

StartLimitBurst=3

StartLimitInterval=30min

TasksMax=infinity

[Install]

WantedBy=ceph-osd.target