[Unit] Description=MoShiro Probe (Podman container) After=network-online.target Wants=network-online.target [Service] EnvironmentFile=/etc/moshiro-update/probe.image Restart=always RestartSec=5 TimeoutStopSec=30 ExecStartPre=-/usr/bin/podman rm -f moshiro-probe ExecStart=/usr/bin/podman run --rm --name moshiro-probe --network host --read-only --security-opt no-new-privileges --security-opt label=disable --cap-drop all --tmpfs /tmp:rw,noexec,nosuid,size=64m,mode=1777 -v /etc/os-release:/etc/os-release:ro -v moshiro-probe-config:/etc/moshiro -v moshiro-probe-status:/etc/moshiro/update-status:ro ${IMAGE} ExecStop=/usr/bin/podman stop -t 20 moshiro-probe [Install] WantedBy=multi-user.target