[Unit] Description=Guanghu read-only cluster probe for %i After=network-online.target [Service] Type=oneshot User=root ExecStart=/usr/local/sbin/guanghu-cluster-node-probe-from-map %i NoNewPrivileges=yes PrivateTmp=yes ProtectSystem=strict ProtectHome=yes ReadWritePaths=/var/lib/guanghu/receipts /root/.ssh