Adguard: Move setcap to unit file

This commit is contained in:
Benoit 2024-11-27 22:35:11 +09:00
parent f465dd19c6
commit 4545979136
Signed by: Benoit
SSH key fingerprint: SHA256:kFsX94Kq6z/6CY0dX+7/FpAeJC0QlMhJVY+B7NYrOmA
2 changed files with 1 additions and 1 deletions

View file

@ -35,7 +35,6 @@ cd /tmp && \
wget --quiet https://github.com/AdguardTeam/AdGuardHome/releases/download/v'"$UPSTREAM_VER"'/AdGuardHome_linux_amd64.tar.gz && \ wget --quiet https://github.com/AdguardTeam/AdGuardHome/releases/download/v'"$UPSTREAM_VER"'/AdGuardHome_linux_amd64.tar.gz && \
tar -xzf AdGuardHome_linux_amd64.tar.gz -C /opt/adguard --strip-components=2 && \ tar -xzf AdGuardHome_linux_amd64.tar.gz -C /opt/adguard --strip-components=2 && \
rm AdGuardHome_linux_amd64.tar.gz rm AdGuardHome_linux_amd64.tar.gz
setcap "CAP_NET_BIND_SERVICE=+eip CAP_NET_RAW=+eip" /opt/adguard/AdGuardHome
install -d -m 755 -o adguard -g adguard /opt/adguard/{data,config} install -d -m 755 -o adguard -g adguard /opt/adguard/{data,config}

View file

@ -5,6 +5,7 @@ ConditionFileIsExecutable=/opt/adguard/AdGuardHome
After=syslog.target network-online.target After=syslog.target network-online.target
[Service] [Service]
ExecStartPre=+/usr/sbin/setcap "CAP_NET_BIND_SERVICE=+eip CAP_NET_RAW=+eip" /opt/adguard/AdGuardHome
# First run must run as root, then chown -R adguard: /etc/adguard /opt/adguard # First run must run as root, then chown -R adguard: /etc/adguard /opt/adguard
# And uncomment + restart service # And uncomment + restart service
#User=adguard #User=adguard