# This unit is meant to be started by network management software
# after a network interface defined in the NBFT gets set up
[Unit]
Description=Connect NBFT-defined NVMe-oF subsystems automatically
ConditionPathExists=|/sys/firmware/acpi/tables/NBFT
ConditionPathExists=|/sys/firmware/acpi/tables/NBFT1
Wants=modprobe@nvme_fabrics.service
After=modprobe@nvme_fabrics.service
After=network-online.target
Before=remote-fs-pre.target

[Service]
ProtectSystem=full
ProtectHome=true
ProtectHostname=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
ProtectProc=invisible
RestrictRealtime=true
LockPersonality=yes
MemoryDenyWriteExecute=yes
RemoveIPC=yes
RestrictAddressFamilies=AF_INET AF_INET6
Type=oneshot
ExecStart=/usr/sbin/nvme connect-all --nbft