feat(fleet): preserve operator VESC integration before final driver merge

2026-09-25 16:40:46 +03:00
parent dad11b47d7
commit 71a648fec8
128 changed files with 22390 additions and 59 deletions
@@ -0,0 +1,37 @@
+[Unit]
+Description=Mission Core VESC Tool service
+Wants=modprobe@cdc_acm.service
+After=systemd-udev-settle.service modprobe@cdc_acm.service
+
+[Service]
+Type=simple
+User=mission-core-vesc
+Group=mission-core-node
+SupplementaryGroups=mission-core-vesc
+WorkingDirectory=/usr/lib/mission-core-vesc
+ExecStart=/usr/bin/python3 -B -m runtime.server
+RuntimeDirectory=mission-core-vesc
+RuntimeDirectoryMode=0750
+StateDirectory=mission-core-vesc
+StateDirectoryMode=0700
+UMask=0007
+Restart=on-failure
+RestartSec=5
+NoNewPrivileges=yes
+CapabilityBoundingSet=
+AmbientCapabilities=
+PrivateNetwork=yes
+ProtectSystem=strict
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+RestrictSUIDSGID=yes
+RestrictAddressFamilies=AF_UNIX
+DevicePolicy=closed
+DeviceAllow=char-ttyACM rw
+MemoryMax=512M
+TasksMax=64
+
+[Install]
+WantedBy=multi-user.target