[asterisk-dev] JIRA 25988: Systemd unit file for Asterisk: Submission

[George Joseph]

On Wed, May 18, 2016 at 4:49 AM, Tzafrir Cohen <tzafrir.cohen at xorcom.com>
wrote:

> On Tue, May 17, 2016 at 08:14:24PM +0000, Sean Brady wrote:
> > Not sure of the best way to do proposed updates here. I have a couple
> > different things that I might suggest here. I’ve found that the
> > AssertDirectory and AssertFile directives are nice so should these
> > directories be empty or file(s) not exist etc you get a big fat failure
> > from systemd on startup. This is handy for production systems.
> >
> > I’ve also found that setting the user and group using systemd behaves
> more
> > consistently from the systemd unit file then the from the command args or
> > config file, although I generally also set the asterisk user and group in
> > asterisk.conf as well.
> >
> > This is actually the unit file that I am using in production now:
> > [Unit]
> > Description="Asterisk PBX And Telephony Server"
> > Documentation="http://wiki.asterisk.org"
> > After=network.target
> > AssertDirectoryNotEmpty=/etc/asterisk
> > AssertDirectoryNotEmpty=/usr/lib/asterisk
> > AssertDirectoryNotEmpty=/usr/lib/asterisk/modules
> > AssertFileNotEmpty=/etc/asterisk/asterisk.conf
> > AssertFileIsExecutable=/usr/sbin/asterisk
> >
> > [Service]
> > User=asterisk
> > Group=asterisk
>
> If Asterisk downgrades itself to the user, it can give itself a number
> of extra permissions in the process. Not sure if systemd can give all of
> those permissions.
>
> > Environment=HOME=/var/lib/asterisk
> > WorkingDirectory=/var/lib/asterisk
> > RuntimeDirectory=/var/run/asterisk
> > RuntimeDirectoryMode=0750
> > PermissionsStartOnly=true
>
> > ExecStartPre=/bin/rm -rf /var/run/asterisk
> > ExecStartPre=/bin/mkdir /var/run/asterisk
> > ExecStartPre=/bin/chown -R asterisk:asterisk /var/run/asterisk
>
> This should be handled by tmpfiles.
>
> I guess we should include a tmpfiles file as well.
>

There's an asterisk.tmpfiles and an asterisk-logrotate in the Fedora/RHEL
repository as well.

http://pkgs.fedoraproject.org/cgit/rpms/asterisk.git/tree/


>
> > ExecStart=/usr/sbin/asterisk -f -C /etc/asterisk/asterisk.conf
> > ExecStop=/usr/sbin/asterisk -rx 'core stop now'
> > ExecReload=/usr/sbin/asterisk -rx 'core reload'
> > Restart=always
>
> Check how this interacts with "asterisk -rx 'core stop now'"
>
> --
>                Tzafrir Cohen
> icq#16849755              jabber:tzafrir.cohen at xorcom.com
> +972-50-7952406           mailto:tzafrir.cohen at xorcom.com
> http://www.xorcom.com
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> asterisk-dev mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-dev
>



-- 
George Joseph
Digium, Inc. | Software Developer
445 Jan Davis Drive NW - Huntsville, AL 35806 - US
Check us out at: www.digium.com & www.asterisk.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-dev/attachments/20160518/0a87a582/attachment-0001.html>