# Copyright 2020 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

description   "Start the boot notification server for arcvm"
author        "chromium-os-dev@chromium.org"

start on starting arcvm-pre-login-services
stop on stopping arcvm-pre-login-services

# The server does work after receiving SIGTERM (sending commands to client over
# the socket), so allow time for that to happen.
kill timeout 10

# Let the process be killed if necessary.
oom score 0
# Virtual memory size is ~16M in test runs, set 160M limit.
limit as 167772160 unlimited

pre-start script
  modprobe -q vhost-vsock
  # Create runtime socket directory.
  rm -rf /run/arcvm_boot_notification_server
  mkdir -m 733 -p /run/arcvm_boot_notification_server
  chown arcvm-boot-notification-server:arcvm-boot-notification-server \
     /run/arcvm_boot_notification_server
end script

exec minijail0 \
  --profile=minimalistic-mountns \
  -k "tmpfs,/run,tmpfs,MS_NOSUID|MS_NODEV|MS_NOEXEC" \
  -b /run/arcvm_boot_notification_server,,1 \
  --uts -e -l -N -n -v -r -l -p -c 0 -w \
  -S /usr/share/policy/arcvm_boot_notification_server-seccomp.policy \
  -u arcvm-boot-notification-server -g arcvm-boot-notification-server \
  /usr/sbin/arcvm_boot_notification_server

post-stop exec rm -rf /run/arcvm_boot_notification_server