From 394c20d8b82a27f601f73b6e6ce18e47df5aef45 Mon Sep 17 00:00:00 2001
From: Jan Jasper de Kroon <jajadekroon@gmail.com>
Date: Thu, 25 Sep 2025 11:30:52 +0200
Subject: [PATCH] systemd/irqbalance: add irqbalance unit

This package provides the systemd service file for irqbalance,
enabling proper IRQ balancing on postmarketOS devices using
systemd.

This allows for better performance and power management by
distributing IRQs across CPU cores.

Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7081>
---
 extra-repos/systemd/systemd-services/APKBUILD |  6 ++-
 .../system-irqbalance.service                 | 43 +++++++++++++++++++
 2 files changed, 48 insertions(+), 1 deletion(-)
 create mode 100644 extra-repos/systemd/systemd-services/system-irqbalance.service

diff --git a/extra-repos/systemd/systemd-services/APKBUILD b/extra-repos/systemd/systemd-services/APKBUILD
index 2c2b4f799..c22fc9dd6 100644
--- a/extra-repos/systemd/systemd-services/APKBUILD
+++ b/extra-repos/systemd/systemd-services/APKBUILD
@@ -7,7 +7,7 @@
 # How to add a new service file (5 steps):
 pkgname=systemd-services
 # 1. bump pkgver
-pkgver=99
+pkgver=100
 pkgrel=0
 pkgdesc="Systemd service files"
 url="https://postmarketos.org"
@@ -54,6 +54,7 @@ subpackages="
 	hkdm-systemd:_service
 	httpd-systemd:_service
 	iio-sensor-proxy-systemd:_service
+	irqbalance-systemd:_service
 	iwd-systemd:_service
 	kactivitymanagerd-systemd:_service
 	kanshi-systemd:_service
@@ -182,6 +183,7 @@ _hfd_service_sources="system/hfd-service.service" # From https://gitlab.com/ubpo
 _hkdm_sources="system/hkdm.service"
 _httpd_sources="system/httpd.service"
 _iio_sensor_proxy_sources="system/iio-sensor-proxy.service"
+_irqbalance_sources="system/irqbalance.service"
 _iwd_sources="system/iwd.service" # From https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/src/iwd.service.in
 _kanshi_sources="user/kanshi.service" # created, no unit file upstream
 _kactivitymanagerd_sources="user/plasma-kactivitymanagerd.service"
@@ -305,6 +307,7 @@ source="$(flatpath \
 	$_hkdm_sources \
 	$_httpd_sources \
 	$_iio_sensor_proxy_sources \
+	$_irqbalance_sources \
 	$_iwd_sources \
 	$_kactivitymanagerd_sources \
 	$_kanshi_sources \
@@ -463,6 +466,7 @@ cf95791ba56247e3b37a1e23d59638ded09cf343b646dd68b733cc1f72d3ea3daa038a99ca961f44
 083e59dcbbbd8f6ea148880256ff20f1a16e583348cd7cfc7aa6321d7b0cbe0a82780fd482a26ef25a5ebcfc83f5b7899d5db7c7d479fd7c56e5d7e95fd24a34  system-hkdm.service
 666ba094bff47aa67b4e4431929516af355f90ffc1fd60429dcd20b337c3c17d2d62a71c289496217282f0819bc8deba8db5cc5b2915b692defa14d19532a8d1  system-httpd.service
 d12ebe6e7db2a8e34baab640dd4e2ea9cd01bc19054adf32d55528a6b27f71c2006ac2d65a58c98e21ed598e9cc66bfe79e197d20ed9d13f866a5a6cd3e247d5  system-iio-sensor-proxy.service
+0ed5e05b73cf4952c81deeffc7f662f0ef6e684c24fb8177f625f2d086582fad2df1376a2479155b4a6aa6d584f1cccfe8c143f7830eccaf5e693cae5aefed2d  system-irqbalance.service
 df3388cb7b9d035e54b34d8f8a6594be89c3015f979fe3bdc199fb7db1ab0bef821d6b306eecdf978eb227454d5e50aab29ac02d9722b1b075ec0ce4705e3518  system-iwd.service
 9cf877929b16f3437e65d1a0a2049799cc97cc84a7caab6a581e90139495b4febb5fb4c59ee463110866a0b60c9462d6d0fdb331d92d29b30ce6aeada365ac48  user-plasma-kactivitymanagerd.service
 fa41668288d53f8ce42a7524f10b1e03812fb11ed71bcb484dc22d0d374b453837317eb599cf61b66163a905949024509e73d5190012b664b301d48af7002a01  user-kanshi.service
diff --git a/extra-repos/systemd/systemd-services/system-irqbalance.service b/extra-repos/systemd/systemd-services/system-irqbalance.service
new file mode 100644
index 000000000..8a30793fd
--- /dev/null
+++ b/extra-repos/systemd/systemd-services/system-irqbalance.service
@@ -0,0 +1,43 @@
+[Unit]
+Description=irqbalance daemon
+Documentation=man:irqbalance(1)
+Documentation=https://github.com/Irqbalance/irqbalance
+ConditionVirtualization=!container
+ConditionCPUs=>1
+
+[Service]
+EnvironmentFile=-/usr/lib/irqbalance/defaults.env
+EnvironmentFile=-/etc/irqbalance.env
+ExecStart=/usr/sbin/irqbalance $IRQBALANCE_ARGS
+CapabilityBoundingSet=
+NoNewPrivileges=yes
+ProtectSystem=strict
+ReadOnlyPaths=/
+ReadWritePaths=/proc/irq
+RestrictAddressFamilies=AF_UNIX AF_NETLINK
+RuntimeDirectory=irqbalance/
+IPAddressDeny=any
+ProtectHome=true
+PrivateTmp=yes 
+PrivateNetwork=yes
+PrivateUsers=true
+ProtectHostname=yes 
+ProtectClock=yes 
+ProtectKernelTunables=yes 
+ProtectKernelModules=yes 
+ProtectKernelLogs=yes 
+ProtectControlGroups=yes 
+RestrictNamespaces=yes
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+RemoveIPC=yes
+PrivateMounts=yes
+SystemCallFilter=@cpu-emulation @privileged @system-service
+SystemCallFilter=~@clock @module @mount @obsolete @raw-io @reboot @resources @swap
+SystemCallErrorNumber=EPERM
+SystemCallArchitectures=native
+
+[Install]
+WantedBy=multi-user.target