Post #3024030

@hailey@hails.org Exactly! We already have containers at home and it's called services. The stupid thing about systemd unit hardening though is that most of the options are silently ignored if their initialization fails for whatever reason. It surely helps unit files portability, but one can't rely on the security features ☹️