Post #1495844
2026-03-27 07:20 UTC
…and unify currently distinct but similar codepaths in systemd's service management and systemd-nspawn's codebase.
With v260 we filled in one major gap to get there: the existing PrivateUsers= setting for services now supports a new value "managed". If selected then a new delegated user namespace UID range is allocated dynamically via systemd-nsresourced, and assigned to the service. Or in other words: there's now a way to spawn a service with a full set of private, transient, 64K UIDs…
Replies (1)
-
@pid_eins@mastodon.social 2026-03-27 07:22
…which is enough to run a full OS inside a system service. Yay! And not just that: it also works unprivileged, i.e. it's enough to also run a full OS with 64K UIDs from a user controlled directory tree. Yippieh yay!