Start user units at the system level
[src/app-framework-main.git] / conf / afm-unit.conf.in
1 ;---------------------------------------------------------------------------------
2 ; File:
3 ;
4 ;    afm-unit.conf
5 ;
6 ; Role:
7 ;
8 ;    Configure how installation of widget produces unit files for systemd
9 ;
10 ; Processing and format:
11 ;
12 ;    1. File load
13 ;
14 ;           Lines beginning with ; are firstly removed
15 ;
16 ;    2. File instantiation
17 ;
18 ;           Mustache (extended) substitutions are applied using JSON
19 ;           data deduced from config.xml file of the widget.
20 ;
21 ;    3. Extraction of units
22 ;
23 ;           Extract produced units, pack it (remove empty lines and directives)
24 ;
25 ; Directives:
26 ;
27 ;    Any directive occupy one whole line starting with %
28 ;
29 ;     - %nl
30 ;
31 ;             produce an empty line at the end
32 ;
33 ;     - %begin systemd-unit
34 ;     - %end systemd-unit
35 ;
36 ;             delimit the produced unit
37 ;
38 ;     - %systemd-unit user
39 ;     - %systemd-unit system
40 ;
41 ;             tells the kind of unit (user/system)
42 ;
43 ;     - %systemd-unit service NAME
44 ;     - %systemd-unit socket NAME
45 ;
46 ;             gives the name and type of the unit
47 ;
48 ;     - %systemd-unit wanted-by NAME
49 ;
50 ;             tells to install a link to unit in the wants of NAME
51 ;
52 ; Setting variables:
53 ;
54 ;    AFM uses the feature of systemd that completely ignores options prefixed
55 ;    with X-
56 ;
57 ;    Consequently, options starting with X-AFM- are recorded as public data
58 ;    about the application and options starting starting with X-AFM-- are
59 ;    recorded as private data.
60 ;
61 ;    Examples:
62 ;
63 ;        X-AFM-description={{description}}
64 ;
65 ;              Records the description of the unit in the field "description"
66 ;              of both the public and private object describing the unit.
67 ;
68 ;        X-AFM--wgtdir={{:#metadata.install-dir}}
69 ;
70 ;              Records the installation directory path in the field "wgtdir"
71 ;              of the private object only.
72 ;
73 ;---------------------------------------------------------------------------------
74 {{#targets}}
75
76 ;---------------------------------------------------------------------------------
77 ;----        P R O V I D E D   U N I T S                                      ----
78 ;---------------------------------------------------------------------------------
79 %begin systemd-unit
80
81 # auto generated by wgtpkg-unit for {{:id}} version {{:version}} target {{:#target}} of {{:idaver}}
82 %nl
83
84 [Unit]
85 Description={{description}}
86 X-AFM-description={{description}}
87 X-AFM-name={{name.content}}
88 X-AFM-shortname={{name.short}}
89 #***************
90 # use X-AFM-id={{:id}}--{{:ver}}--{{:#target}}
91 # instead of:
92 X-AFM-id={{idaver}}{{^#target=main}}@{{:#target}}{{/#target=main}}
93 # when home screen will use real ids
94 #**************
95 X-AFM-version={{:version}}
96 X-AFM-author={{author.content}}
97 X-AFM-author-email={{author.email}}
98 X-AFM-width={{width}}
99 X-AFM-height={{height}}
100 {{#icon}}
101 X-AFM-icon={{:#metadata.install-dir}}/{{:src}}
102 {{/icon}}
103 X-AFM--ID={{:id}}
104 X-AFM--target-name={{:#target}}
105 X-AFM--content={{content.src}}
106 X-AFM--type={{content.type}}
107 X-AFM--wgtdir={{:#metadata.install-dir}}
108 X-AFM--workdir={{&#metadata.app-data-dir}}/{{:id}}
109 %nl
110
111 Wants=sockets.target
112
113 # Adds check to smack
114 ConditionSecurity=smack
115 %nl
116
117 # Automatic bound to required api
118 {{#required-api}}
119 {{#value=auto|ws}}
120 BindsTo=afm-api-ws-{{name}}@%i.socket
121 After=afm-api-ws-{{name}}@%i.socket
122 {{/value=auto|ws}}
123 {{/required-api}}
124 %nl
125
126 [Service]
127 EnvironmentFile=-@afm_confdir@/unit.env.d/*
128 SmackProcessLabel=User::App::{{:id}}
129 SuccessExitStatus=0 SIGKILL
130
131 PAMName=su
132 User=%i
133
134 {{#required-permission}}
135   {{#urn:AGL:permission::platform:no-oom}}      OOMScoreAdjust=-500             {{/urn:AGL:permission::platform:no-oom}}
136   {{#urn:AGL:permission::partner:real-time}}    IOSchedulingClass=realtime      {{/urn:AGL:permission::partner:real-time}}
137 #  {{^urn:AGL:permission::partner:real-time}}    RestrictRealtime=on             {{/urn:AGL:permission::partner:real-time}}
138   {{#urn:AGL:permission::public:display}}       SupplementaryGroups=display     {{/urn:AGL:permission::public:display}}
139   {{^urn:AGL:permission::public:syscall:clock}} SystemCallFilter=~@clock        {{/urn:AGL:permission::public:syscall:clock}}
140 {{/required-permission}}
141 %nl
142
143 WorkingDirectory=-{{&#metadata.app-data-dir}}/{{:id}}
144 ExecStartPre=/bin/mkdir -p {{&#metadata.app-data-dir}}/{{:id}}
145 Environment=AFM_APP_INSTALL_DIR={{:#metadata.install-dir}}
146 Environment=PATH=/usr/sbin:/usr/bin:/sbin:/bin:{{:#metadata.install-dir}}
147
148 %systemd-unit system
149 {{#required-permission.urn:AGL:permission::public:hidden}}\
150 %systemd-unit service afm-service-{{:id}}--{{:ver}}--{{:#target}}@
151 {{/required-permission.urn:AGL:permission::public:hidden}}\
152 {{^required-permission.urn:AGL:permission::public:hidden}}\
153 %systemd-unit service afm-appli-{{:id}}--{{:ver}}--{{:#target}}@
154 {{/required-permission.urn:AGL:permission::public:hidden}}\
155
156 Environment=LD_LIBRARY_PATH=$ORIGIN/lib
157
158 SyslogIdentifier=afbd-{{idaver}}{{^#target=main}}@{{:#target}}{{/#target=main}}
159 StandardInput=null
160 StandardOutput=journal
161 StandardError=journal
162
163 ;---------------------------------------------------------------------------------
164 ;----   text/html  application/vnd.agl.native  application/vnd.agl.service    ----
165 ;---------------------------------------------------------------------------------
166 {{#content.type=text/html|application/vnd.agl.native|application/vnd.agl.service}}
167
168 {{^content.type=application/vnd.agl.service}}
169 X-AFM--http-port={{:#metadata.http-port}}
170 {{/content.type=application/vnd.agl.service}}
171
172 ExecStart=/usr/bin/afb-daemon \
173         --name afbd-{{idaver}}{{^#target=main}}@{{:#target}}{{/#target=main}} \
174         --rootdir={{:#metadata.install-dir}} \
175         --workdir={{&#metadata.app-data-dir}}/{{id}} \
176         {{^content.type=application/vnd.agl.service}} \
177                 --port={{:#metadata.http-port}} \
178                 --random-token \
179                 {{#required-permission.urn:AGL:permission::public:no-htdocs}}\
180                         --roothttp=. \
181                 {{/required-permission.urn:AGL:permission::public:no-htdocs}}\
182                 {{^required-permission.urn:AGL:permission::public:no-htdocs}}\
183                         --roothttp=htdocs \
184                 {{/required-permission.urn:AGL:permission::public:no-htdocs}}\
185         {{/content.type=application/vnd.agl.service}} \
186         {{#content.type=application/vnd.agl.service}} \
187                 --no-httpd \
188         {{/content.type=application/vnd.agl.service}} \
189         {{#required-permission.urn:AGL:permission::public:applications:read}}\
190                 --alias=/icons:{{:#metadata.icons-dir}} \
191         {{/required-permission.urn:AGL:permission::public:applications:read}}\
192         {{#required-api}}\
193                 {{#value=auto}}\
194                         --ws-client=unix:%t/apis/ws/{{name}} \
195                 {{/value=auto}}\
196                 {{#value=ws}}\
197                         --ws-client=unix:%t/apis/ws/{{name}} \
198                 {{/value=ws}}\
199                 {{#value=dbus}}\
200                         --dbus-client={{name}} \
201                 {{/value=dbus}}\
202                 {{#value=link}}\
203                         --binding=%t/apis/lib/{{name}} \
204                 {{/value=link}}\
205                 {{#value=cloud}}\
206                         --cloud-client={{name}} \
207                 {{/value=cloud}}\
208                 {{#value=local}}\
209                         --binding={{:#metadata.install-dir}}/{{name}} \
210                 {{/value=local}}\
211         {{/required-api}}\
212         {{#provided-api}}\
213                 {{#value=auto}}\
214                         {{^required-permission.urn:AGL:permission::partner:service:no-ws}}\
215                                 --ws-server=sd:{{name}} \
216                         {{/required-permission.urn:AGL:permission::partner:service:no-ws}}\
217                         {{^required-permission.urn:AGL:permission::partner:service:no-dbus}}\
218                                 --dbus-server={{name}} \
219                         {{/required-permission.urn:AGL:permission::partner:service:no-dbus}}\
220                 {{/value=auto}}\
221                 {{#value=ws}}\
222                         --ws-server=sd:{{name}} \
223                 {{/value=ws}}\
224                 {{#value=dbus}}\
225                         --dbus-server={{name}} \
226                 {{/value=dbus}}\
227         {{/provided-api}}\
228         {{#content.type=text/html}}\
229                 --exec /usr/bin/web-runtime http://localhost:@p/{{content.src}}?token=@t
230         {{/content.type=text/html}}\
231         {{#content.type=application/vnd.agl.native}}\
232                 --exec {{:#metadata.install-dir}}/{{content.src}} @p @t
233         {{/content.type=application/vnd.agl.native}}
234
235 {{/content.type=text/html|application/vnd.agl.native|application/vnd.agl.service}}
236
237
238 ;---------------------------------------------------------------------------------
239 ;----                 application/x-executable                                ----
240 ;---------------------------------------------------------------------------------
241 {{#content.type=application/x-executable}}
242
243 ExecStart={{:#metadata.install-dir}}/{{content.src}}
244
245 {{/content.type=application/x-executable}}
246
247 ;---------------------------------------------------------------------------------
248 ; auto start
249 ;---------------------------------------------------------------------------------
250 {{#required-permission.urn:AGL:permission::system:run-by-default}}
251 %nl
252 [Install]
253 WantedBy=default.target
254 %systemd-unit wanted-by default.target
255 {{/required-permission.urn:AGL:permission::system:run-by-default}}
256
257 %end systemd-unit
258
259
260 ;---------------------------------------------------------------------------------
261 ;----        P R O V I D E D   A P I S                                        ----
262 ;---------------------------------------------------------------------------------
263
264 {{#provided-api}}
265 {{#value=ws|auto}}
266
267 %begin systemd-unit
268
269 # auto generated by wgtpkg-unit for {{:id}} version {{:version}} target {{:#target}} of {{:idaver}}
270 #
271 %systemd-unit system
272 %systemd-unit socket afm-api-ws-{{name}}@
273
274 [Socket]
275 SmackLabel=*
276 ListenStream=%t/apis/ws/{{name}}
277 FileDescriptorName={{name}}
278
279 {{#required-permission.urn:AGL:permission::public:hidden}}\
280 Service=afm-service-{{:id}}--{{:ver}}--{{:#target}}@%i.service
281 {{/required-permission.urn:AGL:permission::public:hidden}}\
282 {{^required-permission.urn:AGL:permission::public:hidden}}\
283 Service=afm-appli-{{:id}}--{{:ver}}--{{:#target}}@%i.service
284 {{/required-permission.urn:AGL:permission::public:hidden}}\
285
286 ;---------------------------------------------------------------------------------
287 %nl
288 [Install]
289 WantedBy=sockets.target
290 %systemd-unit wanted-by sockets.target
291 ;---------------------------------------------------------------------------------
292
293 %end systemd-unit
294
295 {{/value=ws|auto}}
296 {{/provided-api}}
297
298 {{/targets}}
299