[Unit]
Description=Manage memfd-bind of %f
Documentation=https://github.com/opencontainers/runc/blob/main/contrib/cmd/memfd-bind/README.md

[Service]
Type=simple
ExecStart=memfd-bind "%f"
ExecStop=memfd-bind --cleanup "%f"

[Install]
WantedBy=multi-user.target