fix(device-edge): use compatible Node hardening

2026-08-12 01:23:38 +03:00
parent 6fa9164933
commit 2eb6116880
4 changed files with 13 additions and 5 deletions
@@ -418,7 +418,13 @@ class DeviceEdgeVpsArtifactTest(unittest.TestCase):
        self.assertIn("DEVICE_EDGE_RELAY_SOURCE_POLICY=public-ipv4-only", relay_unit)
        self.assertIn("MemoryMax=192M", relay_unit)
        self.assertIn("User=nodedc-channel", channel_unit)
-        self.assertIn("node --jitless", channel_unit)
+        self.assertIn(
+            "ExecStart=/opt/nodedc-b2-vps/runtime/node/bin/node "
+            "/opt/nodedc-b2-vps/services/device-edge-channel/src/server.mjs",
+            channel_unit,
+        )
+        self.assertIn("MemoryDenyWriteExecute=no", channel_unit)
+        self.assertNotIn("--jitless", channel_unit)
        self.assertIn("MemoryMax=128M", channel_unit)
        self.assertIn("MemorySwapMax=0", channel_unit)
        self.assertIn("CPUQuota=50%", channel_unit)