# Copyright 2018 The ChromiumOS Authors
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

description    "Starts bootlockbox daemon"
author         "chromium-os-dev@chromium.org"

start on started boot-services and started tpm_managerd
stop on stopping boot-services

respawn

oom score -100

tmpfiles /usr/lib/tmpfiles.d/bootlockbox.conf

expect fork

script
  PROFILING_ARGS=""
  if [ -d "/mnt/stateful_partition/unencrypted/profraws" ]; then
    PROFILING_ARGS="-b /mnt/stateful_partition/unencrypted/profraws,,1"
  fi
  exec minijail0 --config /usr/share/minijail/bootlockboxd.conf         \
    ${PROFILING_ARGS}                                                   \
    -- /usr/sbin/bootlockboxd
end script

# Wait for the daemon to claim its D-Bus name.
post-start exec minijail0 -u bootlockboxd -G \
    /usr/bin/gdbus wait --system --timeout 15 org.chromium.BootLockboxInterface