[systemd-devel] machinectl shell vs systemd-run

[Wilhelm Schuster]

Hi,

I’m trying to run a command inside a container (spawned via nspawn). `machinectl shell` and `systemd-run` seem like two ways that accomplish that in systemd. Machinectl’s man page [0] states the following:

Note that systemd-run(1) may be used in place of the shell command, […]. However, it is frequently more privileged than the shell command.

I’m interested in the last part here. Specifically when does `systemd-run` have more privileges than `machinectl shell` and what are those additional privileges?

[0]: https://www.freedesktop.org/software/systemd/man/machinectl.html

Cheers, Wilhelm Schuster.