[Unit] Description=Imunify360 agent Before=cagefs.service After=imunify360.service network.target iptables.service firewalld.service Wants=imunify360.service imunify360-agent.socket imunify360-agent-user.socket # Service will NOT start if this file exists ConditionPathExists=!/var/lib/rpm-state/imunify360-transaction-in-progress [Service] CPUAccounting=true MemoryAccounting=true BlockIOAccounting=true Slice=Imunify-agent_non_resident.slice Environment=PROTOCOL_BUFFERS_PYTHON_IMPLEMENTATION=upb Environment=LANG=en_US.UTF-8 Environment=LC_ALL=en_US.UTF-8 Environment=PYTHONNOUSERSITE=1 Environment=SQLITE_TMPDIR=/var/imunify360/tmp Environment=I360_SOCKET_ACTIVATION=1 Type=simple ExecStartPre=/usr/share/imunify360/scripts/set-service-resources.sh imunify360-agent.service 50 50 ExecStart=/opt/imunify360/venv/bin/python3 -m im360.run ExecStartPost=/bin/bash -c "echo $MAINPID > /var/run/imunify360-agent.pid" ExecStartPost=/bin/systemctl restart imunify360-resource-unlock@imunify360-agent.timer PIDFile=/var/run/imunify360-agent.pid #TODO: must be not less than defence360agent/cli/server.py:stop(seconds=8) TimeoutStartSec=900 TimeoutStopSec=60 RestartSec=5 StartLimitInterval=600s StartLimitBurst=15 # Orphans child processes instead of killing them when the main process is shut down. KillMode=process [Install] WantedBy=multi-user.target