Linux：systemctl管理开机自启进程

文件目录

# 查看目录文件ls /usr/lib/systemd/system/# 搜索ls /usr/lib/systemd/system | grep fpmPHP-fpm.service

常用操作

# helpsystemctl -hsystemctl -l | grep fpmsystemctl list-unit-files | grep fpmphp-fpm.service   enabled# Unit File Commands# 开机时启动该服务systemctl enable php-fpm# 撤销开机启动systemctl disable php-fpm# Reenable one or more unit filessystemctl reenable php-fpm php-fpm-8.0.23# 验证一下是否为开机启动systemctl is-enabled php-fpm  # Unit Commands# Start (activate) one or more unitssystemctl start php-fpm# Show runtime status of one or more unitssystemctl status php-fpm# Reload one or more unitssystemctl reload php-fpm# Start or restart one or more unitssystemctl restart php-fpm# Send signal to processes of a unitsystemctl kill php-fpm# Stop (deactivate) one or more unitssystemctl stop php-fpm#显示全部已经启动的服务systemctl list-units --type=service# Reset failed state for all, one, or more unitssystemctl reset-failed

配置文件示例

PHP安装后生成的配置文件

/usr/lib/systemd/system/php-fpm-8.0.24.service

# It's not recommended to modify this file in-place, because it# will be overwritten during upgrades.  If you want to customize,# the best way is to use the "systemctl edit" command.[Unit]Description=The PHP FastCGI Process ManagerAfter=network.target[Service]Type=simplePIDFile=/usr/local/php/8.0.24/var/run/php-fpm.pidExecStart=/usr/local/php/8.0.24/sbin/php-fpm --nodaemonize --fpm-config /usr/local/php/8.0.24/etc/php-fpm.confExecReload=/bin/kill -USR2 $MAINPID# Set up a new file system namespace and mounts private /tmp and /var/tmp directories# so this service cannot access the global directories and other processes cannot# access this service's directories.PrivateTmp=true# Mounts the /usr, /boot, and /etc directories read-only for processes invoked by this unit.ProtectSystem=full# Sets up a new /dev namespace for the executed processes and only adds api pseudo devices# such as /dev/null, /dev/zero or /dev/random (as well as the pseudo TTY subsystem) to it,# but no physical devices such as /dev/sda.PrivateDevices=true# Explicit module loading will be denied. This allows to turn off module load and unload# operations on modular kernels. It is recommended to turn this on for most services that# do not need special file systems or extra kernel modules to work.ProtecTKErnelModules=true# Kernel variables accessible through /proc/sys, /sys, /proc/sysrq-trigger, /proc/latency_stats,# /proc/acpi, /proc/timer_stats, /proc/fs and /proc/irq will be made read-only to all processes# of the unit. Usually, tunable kernel variables should only be written at boot-time, with the# sysctl.d(5) mechanism. Almost no services need to write to these at runtime; it is hence# recommended to turn this on for most services.ProtectKernelTunables=true# The linux Control Groups (cgroups(7)) hierarchies accessible through /sys/fs/cgroup will be# made read-only to all processes of the unit. Except for container managers no services should# require write access to the control groups hierarchies; it is hence recommended to turn this on# for most servicesProtectControlGroups=true# Any attempts to enable realtime scheduling in a process of the unit are refused.RestrictRealtime=true# Restricts the set of Socket address families accessible to the processes of this unit.# Protects against vulnerabilities such as CVE-2016-8655RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK AF_UNIX# Takes away the ability to create or manage any kind of namespaceRestrictNamespaces=true[Install]WantedBy=multi-user.target

Type：定义启动时的进程行为

• Type=simple：默认值，执行ExecStart指定的命令，启动主进程

参考
systemctl 详解

来源地址：https://blog.csdn.net/mouday/article/details/127700732