[systemd-devel] RootDirectory combined with PrivateUsers=true

[Lennart Poettering]

On So, 27.08.17 17:46, Victor Näslund (victor.naslund at greyhash.se) wrote:

> Hi,
> 
> Is it possible to combine these RootDirectory=/foo and PrivateUsers=true
> directives?
> I am getting the systemd error:
> 
> 
> *● sectest.service - Sectests*
> *   Loaded: loaded (/usr/lib/systemd/system/sectest.service; disabled;
> vendor preset: disabled)*
> *   Active: failed (Result: exit-code) since Sun 2017-08-27 15:30:04 UTC;
> 10ms ago*
> *  Process: 19128 ExecStart=/true (code=exited, status=217/USER)*
> * Main PID: 19128 (code=exited, status=217/USER)*
> 
> 
> I am not sure what exactly is wrong since it works with either PrivateUsers
> or RootDirectory but not combined.

They are definitely intended to work together, in fact when used
together they become most useful, as this means /etc/passwd inside of
the container can safely deviate from the host's /etc/passwd.

If this currently doesn't work, then please file a bug on github, so
that we have a look and fix this!

Lennart

-- 
Lennart Poettering, Red Hat