A common and reliable pattern in service unit files is thus:
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
| # this example shows how to run docker container and use nullmailer, running on a host machine | |
| # first, run a container like that | |
| sudo docker run \ | |
| --rm \ | |
| -ti \ | |
| -v `which sendmail`:`which sendmail` \ | |
| -v `which nullmailer-inject`:`which nullmailer-inject` \ | |
| -v `which nullmailer-queue`:`which nullmailer-queue` \ |
| #!/bin/bash | |
| # Bash Script by https://gist.github.com/mitchellkrogza | |
| # ************************************************************ | |
| # This script clears the log file and database of Fail2Ban | |
| # This resets Fail2Ban to a completely clean state | |
| # Useful to use after you have finished testing all your jails | |
| # and completed your initial setup of Fail2Ban and are now | |
| # putting the server into LIVE mode | |
| # ************************************************************ |
| version: "3" | |
| networks: | |
| proxy: | |
| external: true | |
| services: | |
| public_apache: | |
| image: httpd | |
| labels: |
| ## Morning Opertures | |
| alias whatsup='service --status-all' | |
| alias hello='sudo /etc/init.d/apache2 stop && cd workspace/project && ddev start && ddev launch' | |
| alias hi='sudo systemctl stop apache2' | |
| alias iad='systemctl is-active docker' | |
| alias ports='nmap localhost' | |
| alias dns="sudo systemd-resolve --status | grep 'DNS Servers'" | |
| alias bye='shutdown -r now' | |
| ## Usual Instructions |
| import argparse | |
| import random | |
| import sys | |
| from transformers import AutoModelForCausalLM, AutoTokenizer, DynamicCache | |
| import torch | |
| parser = argparse.ArgumentParser() | |
| parser.add_argument("question", type=str) | |
| parser.add_argument( |