[Unit]
Description=Mission Core isolated RealSense driver
After=network.target
ConditionPathExists=/var/lib/mission-core-node-drivers/active.path
[Service]
User=mission-core-sensors
Group=mission-core-node
SupplementaryGroups=mission-core-sensors
ExecStart=/usr/bin/python3 -I /usr/lib/mission-core-node/sensors/bootstrap.py
StateDirectory=mission-core-sensors
StateDirectoryMode=0700
RuntimeDirectory=mission-core-sensors
RuntimeDirectoryMode=0750
UMask=0077
Environment=OPENBLAS_NUM_THREADS=1
Restart=on-failure
RestartSec=3
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
PrivateTmp=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
RestrictSUIDSGID=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_NETLINK
CapabilityBoundingSet=
LockPersonality=yes
TasksMax=128
MemoryMax=900M
[Install]
WantedBy=multi-user.target