[Unit] Description=OpenFUT STAGING: publish the anchor container network namespace to /run/netns/openfut-staging Documentation=file:///home/alex/OpenFUT/scripts/systemd/README.md After=docker.service Requires=docker.service # Re-resolved on every start, so this unit is also the REPAIR action after the # anchor container is recreated: `systemctl restart openfut-staging-netns` plus # a restart of the dependants re-enters the current namespace. StartLimitIntervalSec=60 StartLimitBurst=5 [Service] Type=oneshot RemainAfterExit=yes # Resolves the anchor BY NAME, never by a stored pid, and exits non-zero when # the anchor is absent — which is what makes the dependants' Requires= a real # admission gate rather than decoration. ExecStart=/home/alex/OpenFUT/scripts/systemd/openfut-netns-bind.sh openfut-staging-anchor openfut-staging # No ExecStop unmount: the namespace belongs to the container's lifetime, and # tearing the bind mount down under a live Core/host would strand them. StandardOutput=journal StandardError=journal SyslogIdentifier=openfut-staging-netns [Install] WantedBy=multi-user.target