gonic: Set PrivateTmp=true for new go-sqlite3 behavior

When running migrations, the go-sqlite3 library used in v0.22.0 will now open files with names like /tmp/1418313342.db; without a tmp directory, that fails and causes errors on startup of the gonic service. Giving the unit a private /tmp directory fixes this issue.
2026-06-11 12:56:11 -04:00
parent c9ac702ae8
commit b3b5f2033b
1 changed files with 1 additions and 0 deletions
@@ -93,6 +93,7 @@ in
        ];
        RestrictNamespaces = true;
        PrivateDevices = true;
+        PrivateTmp = true;
        PrivateUsers = true;
        ProtectClock = true;
        ProtectControlGroups = true;