# vim: set ft=systemd : [Unit] Description=Grafana Loki Promtail Agent After=network-online.target Wants=network-online.target [Service] StateDirectory=%P TimeoutStartSec=7m [Container] Image=docker.io/grafana/promtail:2.9.4 Exec=-config.file=/etc/promtail/config.yml Volume=%S/%P:/var/lib/promtail:rw,Z,U Volume=/etc/machine-id:/etc/machine-id:ro Volume=/etc/promtail:/etc/promtail:ro Volume=/run/log:/run/log:ro Volume=/var/log:/var/log:ro PublishPort=9080:9080 # container_t is not allowed to read var_log_t / syslogd_var_run_t SecurityLabelDisable=true [Install] WantedBy=multi-user.target