Merge pull request #52357 from azat/fix-capabilities

Fix capabilities installed via systemd service (fixes netlink/IO priorities)
This commit is contained in:
Alexey Milovidov 2023-07-22 03:28:39 +03:00 committed by GitHub
commit 45f88f8f25
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -29,6 +29,7 @@ EnvironmentFile=-/etc/default/clickhouse
LimitCORE=infinity LimitCORE=infinity
LimitNOFILE=500000 LimitNOFILE=500000
CapabilityBoundingSet=CAP_NET_ADMIN CAP_IPC_LOCK CAP_SYS_NICE CAP_NET_BIND_SERVICE CapabilityBoundingSet=CAP_NET_ADMIN CAP_IPC_LOCK CAP_SYS_NICE CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_ADMIN CAP_IPC_LOCK CAP_SYS_NICE CAP_NET_BIND_SERVICE
[Install] [Install]
# ClickHouse should not start from the rescue shell (rescue.target). # ClickHouse should not start from the rescue shell (rescue.target).