Avoid polkit and bug
[src/app-framework-main.git] / conf / afm-unit-debug.conf.in
1 ;---------------------------------------------------------------------------------
2 ; File:
3 ;
4 ;    afm-unit.conf
5 ;
6 ; Role:
7 ;
8 ;    Configure how installation of widget produces unit files for systemd
9 ;
10 ; Processing and format:
11 ;
12 ;    1. File load
13 ;
14 ;           Lines beginning with ; are firstly removed
15 ;
16 ;    2. File instantiation
17 ;
18 ;           Mustache (extended) substitutions are applied using JSON
19 ;           data deduced from config.xml file of the widget.
20 ;
21 ;    3. Extraction of units
22 ;
23 ;           Extract produced units, pack it (remove empty lines and directives)
24 ;
25 ; Directives:
26 ;
27 ;    Any directive occupy one whole line starting with %
28 ;
29 ;     - %nl
30 ;
31 ;             produce an empty line at the end
32 ;
33 ;     - %begin systemd-unit
34 ;     - %end systemd-unit
35 ;
36 ;             delimit the produced unit
37 ;
38 ;     - %systemd-unit user
39 ;     - %systemd-unit system
40 ;
41 ;             tells the kind of unit (user/system)
42 ;
43 ;     - %systemd-unit service NAME
44 ;     - %systemd-unit socket NAME
45 ;
46 ;             gives the name and type of the unit
47 ;
48 ;     - %systemd-unit wanted-by NAME
49 ;
50 ;             tells to install a link to unit in the wants of NAME
51 ;
52 ; Setting variables:
53 ;
54 ;    AFM uses the feature of systemd that completely ignores options prefixed
55 ;    with X-
56 ;
57 ;    Consequently, options starting with X-AFM- are recorded as public data
58 ;    about the application and options starting starting with X-AFM-- are
59 ;    recorded as private data.
60 ;
61 ;    Examples:
62 ;
63 ;        X-AFM-description={{description}}
64 ;
65 ;              Records the description of the unit in the field "description"
66 ;              of both the public and private object describing the unit.
67 ;
68 ;        X-AFM--wgtdir={{:#metadata.install-dir}}
69 ;
70 ;              Records the installation directory path in the field "wgtdir"
71 ;              of the private object only.
72 ;
73 ;---------------------------------------------------------------------------------
74 {{#targets}}
75
76 ;---------------------------------------------------------------------------------
77 ;----        P R O V I D E D   U N I T S                                      ----
78 ;---------------------------------------------------------------------------------
79 %begin systemd-unit
80
81 # auto generated by wgtpkg-unit for {{:id}} version {{:version}} target {{:#target}} of {{:idaver}}
82 %nl
83
84 [Unit]
85 Description={{description}}
86 X-AFM-description={{description}}
87 X-AFM-name={{name.content}}
88 X-AFM-shortname={{name.short}}
89 #***************
90 # use X-AFM-id={{:id}}--{{:ver}}--{{:#target}}
91 # instead of:
92 X-AFM-id={{idaver}}{{^#target=main}}@{{:#target}}{{/#target=main}}
93 # when home screen will use real ids
94 #**************
95 X-AFM-version={{:version}}
96 X-AFM-author={{author.content}}
97 X-AFM-author-email={{author.email}}
98 X-AFM-width={{width}}
99 X-AFM-height={{height}}
100 {{#icon}}
101 X-AFM-icon={{:#metadata.install-dir}}/{{:src}}
102 {{/icon}}
103 X-AFM--ID={{:id}}
104 X-AFM--target-name={{:#target}}
105 X-AFM--content={{content.src}}
106 X-AFM--type={{content.type}}
107 X-AFM--wgtdir={{:#metadata.install-dir}}
108 X-AFM--workdir={{&#metadata.app-data-dir}}/{{:id}}
109 %nl
110
111 Wants=sockets.target
112
113 # Adds check to smack
114 ConditionSecurity=smack
115 %nl
116
117 # Automatic bound to required api
118 {{#required-api}}
119 {{#value=auto|ws}}
120 BindsTo=afm-api-ws-{{name}}@%i.socket
121 After=afm-api-ws-{{name}}@%i.socket
122 {{/value=auto|ws}}
123 {{/required-api}}
124 %nl
125
126 [Service]
127 EnvironmentFile=-@afm_confdir@/unit.env.d/*
128 SmackProcessLabel=User::App::{{:id}}
129 SuccessExitStatus=0 SIGKILL
130
131 PAMName=su
132 User=%i
133
134 CapabilityBoundingSet=
135 AmbientCapabilities=
136
137 {{#required-permission}}
138   {{#urn:AGL:permission::platform:no-oom}}      OOMScoreAdjust=-500             {{/urn:AGL:permission::platform:no-oom}}
139   {{#urn:AGL:permission::partner:real-time}}    IOSchedulingClass=realtime      {{/urn:AGL:permission::partner:real-time}}
140 #  {{^urn:AGL:permission::partner:real-time}}    RestrictRealtime=on             {{/urn:AGL:permission::partner:real-time}}
141   {{#urn:AGL:permission::public:display}}       SupplementaryGroups=display     {{/urn:AGL:permission::public:display}}
142   {{^urn:AGL:permission::public:syscall:clock}} SystemCallFilter=~@clock        {{/urn:AGL:permission::public:syscall:clock}}
143 {{/required-permission}}
144 %nl
145
146 WorkingDirectory=-{{&#metadata.app-data-dir}}/{{:id}}
147 ExecStartPre=/bin/mkdir -p {{&#metadata.app-data-dir}}/{{:id}}
148 Environment=AFM_APP_INSTALL_DIR={{:#metadata.install-dir}}
149 Environment=PATH=/usr/sbin:/usr/bin:/sbin:/bin:{{:#metadata.install-dir}}
150
151 ; Needed to enable debug
152 Environment=AFM_ID={{idaver}}{{^#target=main}}@{{:#target}}{{/#target=main}}
153 EnvironmentFile=-/var/run/afm-debug/{{idaver}}{{^#target=main}}@{{:#target}}{{/#target=main}}.env
154
155 %systemd-unit system
156 {{#required-permission.urn:AGL:permission::public:hidden}}\
157 %systemd-unit service afm-service-{{:id}}--{{:ver}}--{{:#target}}@
158 {{/required-permission.urn:AGL:permission::public:hidden}}\
159 {{^required-permission.urn:AGL:permission::public:hidden}}\
160 %systemd-unit service afm-appli-{{:id}}--{{:ver}}--{{:#target}}@
161 {{/required-permission.urn:AGL:permission::public:hidden}}\
162
163 Environment=LD_LIBRARY_PATH=$ORIGIN/lib
164
165 SyslogIdentifier=afbd-{{idaver}}{{^#target=main}}@{{:#target}}{{/#target=main}}
166 StandardInput=null
167 StandardOutput=journal
168 StandardError=journal
169
170 ;---------------------------------------------------------------------------------
171 ;----   text/html  application/vnd.agl.native  application/vnd.agl.service    ----
172 ;---------------------------------------------------------------------------------
173 {{#content.type=text/html|application/vnd.agl.native|application/vnd.agl.service}}
174
175 X-AFM--http-port={{:#metadata.http-port}}
176
177 ExecStart=/usr/bin/afb-daemon \
178         --name afbd-{{idaver}}{{^#target=main}}@{{:#target}}{{/#target=main}} \
179         --rootdir={{:#metadata.install-dir}} \
180         --workdir={{&#metadata.app-data-dir}}/{{id}} \
181         --port={{:#metadata.http-port}} \
182         --token=HELLO \
183         --verbose \
184         --monitoring \
185         {{^content.type=application/vnd.agl.service}} \
186                 {{#required-permission.urn:AGL:permission::public:no-htdocs}}\
187                         --roothttp=. \
188                 {{/required-permission.urn:AGL:permission::public:no-htdocs}}\
189                 {{^required-permission.urn:AGL:permission::public:no-htdocs}}\
190                         --roothttp=htdocs \
191                 {{/required-permission.urn:AGL:permission::public:no-htdocs}}\
192         {{/content.type=application/vnd.agl.service}} \
193         {{#content.type=application/vnd.agl.service}} \
194                 --roothttp=. \
195         {{/content.type=application/vnd.agl.service}} \
196         {{#required-permission.urn:AGL:permission::public:applications:read}}\
197                 --alias=/icons:{{:#metadata.icons-dir}} \
198         {{/required-permission.urn:AGL:permission::public:applications:read}}\
199         {{#required-api}}\
200                 {{#value=auto}}\
201                         --ws-client=unix:%t/apis/ws/{{name}} \
202                 {{/value=auto}}\
203                 {{#value=ws}}\
204                         --ws-client=unix:%t/apis/ws/{{name}} \
205                 {{/value=ws}}\
206                 {{#value=dbus}}\
207                         --dbus-client={{name}} \
208                 {{/value=dbus}}\
209                 {{#value=link}}\
210                         --binding=%t/apis/lib/{{name}} \
211                 {{/value=link}}\
212                 {{#value=cloud}}\
213                         --cloud-client={{name}} \
214                 {{/value=cloud}}\
215                 {{#value=local}}\
216                         --binding={{:#metadata.install-dir}}/{{name}} \
217                 {{/value=local}}\
218         {{/required-api}}\
219         {{#provided-api}}\
220                 {{#value=auto}}\
221                         {{^required-permission.urn:AGL:permission::partner:service:no-ws}}\
222                                 --ws-server=sd:{{name}} \
223                         {{/required-permission.urn:AGL:permission::partner:service:no-ws}}\
224                         {{^required-permission.urn:AGL:permission::partner:service:no-dbus}}\
225                                 --dbus-server={{name}} \
226                         {{/required-permission.urn:AGL:permission::partner:service:no-dbus}}\
227                 {{/value=auto}}\
228                 {{#value=ws}}\
229                         --ws-server=sd:{{name}} \
230                 {{/value=ws}}\
231                 {{#value=dbus}}\
232                         --dbus-server={{name}} \
233                 {{/value=dbus}}\
234         {{/provided-api}}\
235         {{#content.type=text/html}}\
236                 --exec /usr/bin/web-runtime http://localhost:@p/{{content.src}}?token=@t
237         {{/content.type=text/html}}\
238         {{#content.type=application/vnd.agl.native}}\
239                 --exec {{:#metadata.install-dir}}/{{content.src}} @p @t
240         {{/content.type=application/vnd.agl.native}}
241
242 {{/content.type=text/html|application/vnd.agl.native|application/vnd.agl.service}}
243
244
245 ;---------------------------------------------------------------------------------
246 ;----                 application/x-executable                                ----
247 ;---------------------------------------------------------------------------------
248 {{#content.type=application/x-executable}}
249
250 ExecStart={{:#metadata.install-dir}}/{{content.src}}
251
252 {{/content.type=application/x-executable}}
253
254 ;---------------------------------------------------------------------------------
255 ; auto start
256 ;---------------------------------------------------------------------------------
257 {{#required-permission.urn:AGL:permission::system:run-by-default}}
258 %nl
259 [Install]
260 WantedBy=default.target
261 %systemd-unit wanted-by default.target
262 {{/required-permission.urn:AGL:permission::system:run-by-default}}
263
264 %end systemd-unit
265
266
267 ;---------------------------------------------------------------------------------
268 ;----        P R O V I D E D   A P I S                                        ----
269 ;---------------------------------------------------------------------------------
270
271 {{#provided-api}}
272 {{#value=ws|auto}}
273
274 %begin systemd-unit
275
276 # auto generated by wgtpkg-unit for {{:id}} version {{:version}} target {{:#target}} of {{:idaver}}
277 #
278 %systemd-unit system
279 %systemd-unit socket afm-api-ws-{{name}}@
280
281 [Socket]
282 SmackLabel=*
283 ListenStream=%t/apis/ws/{{name}}
284 FileDescriptorName={{name}}
285
286 {{#required-permission.urn:AGL:permission::public:hidden}}\
287 Service=afm-service-{{:id}}--{{:ver}}--{{:#target}}@%i.service
288 {{/required-permission.urn:AGL:permission::public:hidden}}\
289 {{^required-permission.urn:AGL:permission::public:hidden}}\
290 Service=afm-appli-{{:id}}--{{:ver}}--{{:#target}}@%i.service
291 {{/required-permission.urn:AGL:permission::public:hidden}}\
292
293 ;---------------------------------------------------------------------------------
294 %nl
295 [Install]
296 WantedBy=sockets.target
297 %systemd-unit wanted-by sockets.target
298 ;---------------------------------------------------------------------------------
299
300 %end systemd-unit
301
302 {{/value=ws|auto}}
303 {{/provided-api}}
304
305 {{/targets}}
306