xuans/Scert
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修正管理员恢复单元超时配置

Browse Source
This commit is contained in:
xuans 2026-09-22 11:29:05 +08:00
parent 5dee59a0d2
commit ce945236da
2 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
backend/internal/admin/server_test.go
View File

@ -27,7 +27,8 @@ func TestScertAdminSystemdUnitKeepsManualOnlyPolicy(t *testing.T) {
"RuntimeDirectoryMode=0700", "RuntimeDirectoryMode=0700",
"ExecStart=/scert/scert-admin", "ExecStart=/scert/scert-admin",
"Restart=no", "Restart=no",
"RuntimeMaxSec=130s", "TimeoutStartSec=130s",
"TimeoutStopSec=5s",
"Type=oneshot", "Type=oneshot",
"Requisite=Scert.service", "Requisite=Scert.service",
"KillMode=mixed", "KillMode=mixed",
@ -47,6 +48,7 @@ func TestScertAdminSystemdUnitKeepsManualOnlyPolicy(t *testing.T) {
"Restart=always", "Restart=always",
"Restart=on-failure", "Restart=on-failure",
"ExecReload=", "ExecReload=",
"RuntimeMaxSec=",
"AF_INET", "AF_INET",
"AF_INET6", "AF_INET6",
} { } {

3
deploy/systemd/Scert-admin.service
View File

@ -19,7 +19,6 @@ TimeoutStartSec=130s
TimeoutStopSec=5s TimeoutStopSec=5s
KillMode=mixed KillMode=mixed
Restart=no Restart=no
RuntimeMaxSec=130s
UMask=0077 UMask=0077
NoNewPrivileges=yes NoNewPrivileges=yes
CapabilityBoundingSet=CAP_SYS_PTRACE CAP_DAC_OVERRIDE CapabilityBoundingSet=CAP_SYS_PTRACE CAP_DAC_OVERRIDE
@ -52,4 +51,4 @@ RestrictAddressFamilies=AF_UNIX
# 当前实现通过本机 Socket 交互，不再维护旧注释中描述的 Web 重置入口。 # 当前实现通过本机 Socket 交互，不再维护旧注释中描述的 Web 重置入口。
# 管理程序使用 root 读取显式启动者的终端；只保留终端访问及本机 Socket 所需能力。 # 管理程序使用 root 读取显式启动者的终端；只保留终端访问及本机 Socket 所需能力。
# 新密码和验证码只在调用终端输入，不写入文件、命令参数或服务日志。 # 新密码和验证码只在调用终端输入，不写入文件、命令参数或服务日志。