A common and reliable pattern in service unit files is thus:
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
# Courtesy of: https://stackoverflow.com/a/11974399 | |
{%- for item in items %} | |
[ | |
"{{item}}"{{ "," if not loop.last }} | |
] | |
{%- endfor %} |
#!/bin/bash | |
set -e | |
usage="$(basename "$0") [-h] [-i PROJECT] [-v VM] [-p PYTHON] [-d NOTEBOOKS] | |
Make a user provide SSH key and jupyter notebooks (in roles/bootstrap/files/notebooks) to each user listed in var/common.yml | |
where: | |
-h show this help text | |
-i google cloud project id | |
-v name of instance/virtual machine | |
-p python path |