feat(k1): stabilize LAB bridge and isolate onboard device integration

2026-09-07 10:31:33 +03:00
parent 020a878915
commit 63ea2bed67
115 changed files with 13700 additions and 988 deletions
@@ -0,0 +1,38 @@
+[Unit]
+Description=Mission Core Node K1 Bridge and acquisition
+After=bluetooth.service NetworkManager.service
+Wants=bluetooth.service NetworkManager.service
+
+[Service]
+Type=simple
+User=mission-core-k1
+Group=mission-core-node
+SupplementaryGroups=bluetooth
+ExecStart=/usr/bin/python3 -I /usr/lib/mission-core-node/k1_bootstrap.py
+StateDirectory=mission-core-k1
+StateDirectoryMode=0700
+RuntimeDirectory=mission-core-k1
+RuntimeDirectoryMode=0750
+LoadCredentialEncrypted=k1-application
+UMask=0007
+Environment=OMP_NUM_THREADS=2 OPENBLAS_NUM_THREADS=2
+Restart=on-failure
+RestartSec=3
+NoNewPrivileges=yes
+ProtectSystem=strict
+ProtectHome=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+RestrictSUIDSGID=yes
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
+CapabilityBoundingSet=
+LockPersonality=yes
+TasksMax=128
+MemoryMax=2G
+LimitNOFILE=2048
+
+[Install]
+WantedBy=multi-user.target