--- Class[Opensearch].orig
+++ Class[Opensearch]
+ plugins_mandatory => ['analysis-hebrew', 'analysis-icu', 'analysis-smartcn', 'analysis-stempel', 'analysis-ukrainian', 'cirrus-highlighter', 'opensearch-analysis-stconvert', 'opensearch-extra', 'opensearch-extra-analysis-esperanto', 'opensearch-extra-analysis-serbian', 'opensearch-extra-analysis-slovak', 'ltr', 'opensearch-analisys-stconvert', 'opensearch-ltr']
File[/etc/systemd/system/opensearch_@.service.d/opensearch_@.conf]
- Parameters differences:
--- File[/etc/systemd/system/opensearch_@.service.d/opensearch_@.conf].orig
+++ File[/etc/systemd/system/opensearch_@.service.d/opensearch_@.conf]
+ notify => Exec[systemd daemon-reload for opensearch_@.service (opensearch_@-opensearch_@)]
+ owner => root
+ mode => 0444
+ group => root
+ ensure => present
- Content differences:
--- /etc/systemd/system/opensearch_@.service.d/opensearch_@.conf.orig
+++ /etc/systemd/system/opensearch_@.service.d/opensearch_@.conf
@@ -0,0 +1,26 @@
+# The OpenSearch packages come with a lot of plugins
+# we don't want or need. This override helps us
+# expose only the plugins we explicitly set via
+# $plugins_mandatory var
+[Service]
+# Give OpenSearch its own mount namespace
+PrivateMounts=yes
+
+# Replace plugins dir with an empty tmpfs
+TemporaryFileSystem=/usr/share/opensearch/plugins:rw
+
+BindPaths=
+BindPaths=/usr/share/opensearch/plugins/analysis-hebrew
+BindPaths=/usr/share/opensearch/plugins/analysis-icu
+BindPaths=/usr/share/opensearch/plugins/analysis-smartcn
+BindPaths=/usr/share/opensearch/plugins/analysis-stempel
+BindPaths=/usr/share/opensearch/plugins/analysis-ukrainian
+BindPaths=/usr/share/opensearch/plugins/cirrus-highlighter
+BindPaths=/usr/share/opensearch/plugins/opensearch-analysis-stconvert
+BindPaths=/usr/share/opensearch/plugins/opensearch-extra
+BindPaths=/usr/share/opensearch/plugins/opensearch-extra-analysis-esperanto
+BindPaths=/usr/share/opensearch/plugins/opensearch-extra-analysis-serbian
+BindPaths=/usr/share/opensearch/plugins/opensearch-extra-analysis-slovak
+BindPaths=/usr/share/opensearch/plugins/ltr
+BindPaths=/usr/share/opensearch/plugins/opensearch-analisys-stconvert
+BindPaths=/usr/share/opensearch/plugins/opensearch-ltr
Relevant files