Store hub state inside install_prefix

rm -rf'ing the prefix should get rid of almost everything

tljh/installer.py

@@ -37,6 +37,8 @@ def ensure_jupyterhub_service(prefix):
         with open(proxy_secret_path, 'w') as f:
             f.write('CONFIGPROXY_AUTH_TOKEN=' + secrets.token_hex(32))
 
+    os.makedirs(os.path.join(INSTALL_PREFIX, 'hub', 'state'), mode=0o700, exist_ok=True)
+
 
 def ensure_jupyterhub_package(prefix):
     """

tljh/systemd-units/jupyterhub.service

@@ -8,9 +8,7 @@ User=root
 Restart=always
 # jupyterhub process should have no access to home directories
 ProtectHome=tmpfs
-# Use a persistent, permissioned state directory for db + cookie secrets
-StateDirectory=jupyterhub
-WorkingDirectory=/var/lib/jupyterhub
+WorkingDirectory={install_prefix}/hub/state
 # Protect bits that are normally shared across the system
 PrivateTmp=yes
 PrivateDevices=yes