NixDaemon

NixOS pentest workstation as one flake — IceBreaker's successor
git clone https://git.daemon-sec.xyz/NixDaemon.git
Log | Files | Refs | README

motherboard-stability.service (679B)

      1 [Unit]
      2 Description=CPU stability limits for the GM7RGxM fan/power fault workaround
      3 After=systemd-tmpfiles-setup.service
      4 
      5 [Service]
      6 Type=simple
      7 ExecStart=/usr/bin/python3 -I /usr/local/lib/motherboardctl/stability_guard.py
      8 Restart=on-failure
      9 RestartSec=3
     10 RuntimeDirectory=motherboard-stability
     11 RuntimeDirectoryMode=0755
     12 NoNewPrivileges=true
     13 ProtectSystem=strict
     14 ProtectHome=true
     15 ReadWritePaths=/sys/devices/system/cpu /run/motherboard-stability
     16 PrivateTmp=true
     17 PrivateDevices=true
     18 ProtectKernelModules=true
     19 ProtectControlGroups=true
     20 RestrictAddressFamilies=AF_UNIX
     21 LockPersonality=true
     22 RestrictSUIDSGID=true
     23 CapabilityBoundingSet=
     24 UMask=0022
     25 
     26 [Install]
     27 WantedBy=multi-user.target