# =====================================================================
# Put a staged installation disc into the library.
#
#   systemctl start owuivm-insert@ubuntu.service
#
# The instance is the MACHINE ID, not a path. The desktop tool has
# already copied the disc into /var/lib/owuivm/incoming, as the operator,
# out of their own home - see the header of owuivm-insert-media for why
# that is the only arrangement that works. All this unit does is check
# the staged file and move it, which is a rename within one filesystem.
#
# ProtectHome stays ON. This never reads the operator's home; that is the
# entire point of the staging step.
# =====================================================================
[Unit]
Description=Insert the staged installation disc for %i

[Service]
Type=oneshot
User=owuivmadm
Group=owuivmadm
RemainAfterExit=no
UMask=0022
ProtectSystem=strict
# The staging directory, and the library it moves the disc into.
ReadWritePaths=/var/lib/owuivm/iso /var/lib/owuivm/incoming
ProtectHome=yes
PrivateTmp=yes
NoNewPrivileges=yes
# A 6-8 GB disc has already been copied by this point; the move itself is
# instant. This is only a backstop against a wedged filesystem.
TimeoutStartSec=120
ExecStart=/usr/local/libexec/owuivm-insert-media %i