undefined | Better HN

0 pointsptx2y ago0 comments

What if you want to let a non-root user manage the systemd unit for a particular service? Is there a better way than per-user systemd instances?

0 comments

acdha2y ago

Check example 3.4 here for a polkit policy allowing an arbitrary user to restart a single unit:

https://wiki.archlinux.org/title/Polkit

twic2y ago

Does this let them modify the unit file, create units, create timers, etc?

User systemd allows that kind of complete self-service, and so lets you do application deployment and management without touching the root account, which is rather nice.

1 more reply

chuckadams2y ago

chgrp, setfacl, sudo.conf ... lots of choices.

j / k navigate · click thread line to collapse