23 May 2021 |
Gytis Ivaskevicius | :/ | 17:37:20 |
9 Apr 2025 |
ElvishJerricco | that's just a slice unit | 19:39:37 |
23 May 2021 |
Gytis Ivaskevicius | andi-: I beleive one could go other way around - in prestart add symlink from /var/lib/xyz to /srv/xyz | 17:38:39 |
9 Apr 2025 |
ElvishJerricco | right? | 19:39:39 |
23 May 2021 |
Gytis Ivaskevicius | This should take care of permission issues | 17:38:49 |
9 Apr 2025 |
ElvishJerricco | oh you mean like set service unit settings based on their slice | 19:39:52 |
23 May 2021 |
Gytis Ivaskevicius | i ave not tried it tho | 17:39:08 |
9 Apr 2025 |
ElvishJerricco | hm | 19:39:54 |
23 May 2021 |
andi- | That still sounds like it will interfere with however systemd works. If you specify StateDirectory it assumes it will take care of creating/ensuring it exists. | 17:46:58 |
9 Apr 2025 |
@srestegosaurio:tchncs.de | I mean tweaking sandboxing and security settings slice-wide.
| 19:40:21 |
23 May 2021 |
Gytis Ivaskevicius | Well, you can try creating an issue on systemd github | 17:49:12 |
9 Apr 2025 |
ElvishJerricco | yea that's not really what slices are for | 19:40:26 |
23 May 2021 |
Gytis Ivaskevicius | but probably the simplest solution here would be to get rid of dynamic users, or atleast explicitly specify a group | 17:49:40 |
9 Apr 2025 |
ElvishJerricco | slices are for resource management, not service configuration | 19:40:45 |
23 May 2021 |
Gytis Ivaskevicius | (and ofc make sure that files owned by that group has rw permissions) | 17:50:03 |
9 Apr 2025 |
ElvishJerricco | two things being in the same slice has little to do with whether they should be configured similarly | 19:41:10 |
23 May 2021 |
andi- | Of course that is the easy way out :-) | 17:53:01 |
9 Apr 2025 |
@srestegosaurio:tchncs.de | I would have doubted my hability to read if you had told me that it was indeed possible. xD
| 19:41:55 |
23 May 2021 |
andi- | I can solve the issue and it isn't blocking me right now but I'd like to know how I would do this properly in the upstream sense. | 17:53:28 |
9 Apr 2025 |
@srestegosaurio:tchncs.de | So then it is templates what I need, right?
| 19:43:36 |
23 May 2021 |
| kreisys joined the room. | 19:09:12 |
9 Apr 2025 |
@srestegosaurio:tchncs.de | Not actually intending to apply them to the whole system but I have a a lot of repeated code.
| 19:45:12 |
23 May 2021 |
| Room Avatar Renderer. | 20:54:58 |
9 Apr 2025 |
ElvishJerricco | templates are for when you want the literal same unit but with different parameters | 19:45:58 |
24 May 2021 |
| papojari 🏳️🌈 ☭ (we/us) (Old) changed their display name from papojari to papojari ☭ (we/us). | 00:09:53 |
9 Apr 2025 |
ElvishJerricco | e.g. systemd-fsck@dev-foo.service is the fsck service for the parameter /dev/foo | 19:46:09 |
24 May 2021 |
| papojari 🏳️🌈 ☭ (we/us) (Old) changed their display name from papojari ☭ (we/us) to papojari 🏳️🌈 ☭ (we/us). | 00:14:37 |
9 Apr 2025 |
@srestegosaurio:tchncs.de | Well, then I guess it's time to do some nix abominations.
| 19:46:48 |
24 May 2021 |
| papojari 🏳️🌈 ☭ (we/us) (Old) changed their display name from papojari 🏳️🌈 ☭ (we/us) to papojari 🏳️🌈 ☭ (we/us) (Old). | 00:40:08 |
9 Apr 2025 |
ElvishJerricco | If you just want different units to share some directives, I think you're just looking for a Nix function | 19:47:15 |