[Unit]
Description=Activate the staged full-offline HoloLake Code Channel JD candidate
After=hlcc-jd-candidate.service
Requires=hlcc-jd-candidate.service

[Service]
Type=oneshot
User=guanghu
Group=guanghu
ExecStart=/usr/bin/python3 __RELEASE_ROOT__/server-tools/hololake-code-channel/jd-candidate/activate-staged-candidate.py
RemainAfterExit=true
TimeoutStartSec=60
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
PrivateDevices=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
RestrictSUIDSGID=true
LockPersonality=true
ReadOnlyPaths=__RELEASE_ROOT__

[Install]
WantedBy=multi-user.target