openstack-ansible-memcached.../templates/systemd.without-privatedevices.conf.j2
Andreas Jaeger 426a4f5f0d
Clean up the role and further isolate the service
This change cleans up the role a little bit making it more consistent.

A new configuration file has been added which will further isolate
our services using a named cgroup; this is similar to what we already do in
our openstack services. By further isolating the service from the system
we get quite a bit more control and accountability.

Change-Id: I02a84a2560853473c986ad0db26874341a23fc82
Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
2017-11-29 20:37:56 -06:00

5 lines
123 B
Django/Jinja

# {{ ansible_managed }}
[Service]
PrivateDevices={{ memcached_disable_privatedevices | bool | ternary('false', 'true') }}