Files
Claude 6700a16adc Add real socket activation to the quadlets
Each heavy service now has a loopback .socket and a systemd-socket-proxyd
service (Requires=/After= the container, --exit-idle-time) on a shifted
container port. Container units keep StopWhenUnneeded=true, lose their
[Install] section and SecurityLabelType=spc, use Notify=healthy, and the
emulator uses AddDevice=/dev/kvm under default container_t confinement.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_012AuVk4nEvBXaTjs4G6wdW4
2026-10-16 19:29:57 +00:00
..