initial commit

Signed-off-by: NotAShelf <raf@notashelf.dev>
Change-Id: Ib131388c1056b6708b730a35011811026a6a6964

contrib/pscand.example.conf

@@ -0,0 +1,27 @@
+log_dir = "/var/log/pscand"
+retention_days = 7
+ring_buffer_size = 60
+journal_enabled = true
+file_enabled = true
+
+[scanner_dirs]
+# Directories to load scanner plugins from
+dirs = [
+    "~/.local/share/pscand/scanners",
+]
+
+[scanners.system]
+enabled = true
+interval_secs = 1
+
+[scanners.sensor]
+enabled = true
+interval_secs = 2
+
+[scanners.power]
+enabled = true
+interval_secs = 2
+
+[scanners.proc]
+enabled = true
+interval_secs = 5

contrib/systemd/pscand.service

@@ -0,0 +1,34 @@
+[Unit]
+Description=Pluggable System Condition Monitoring Daemon
+Documentation=https://github.com/pscand/pscand
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/pscand run --config /etc/pscand/pscand.conf
+Restart=on-failure
+RestartSec=5
+User=root
+Group=root
+
+# Log to journal
+StandardOutput=journal
+StandardError=journal
+
+# Capabilities for sensor access
+AmbientCapabilities=CAP_SYS_ADMIN CAP_DAC_OVERRIDE
+
+# Security hardening
+ProtectSystem=full
+ProtectHome=true
+NoNewPrivileges=false
+
+# Runtime directory
+RuntimeDirectory=pscand
+RuntimeDirectoryMode=0755
+
+# Tempfs for sensitive /proc data
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target