[Nix-dev] nixos service using privileged ports as a non-root user

Eelco Dolstra eelco.dolstra at logicblox.com
Fri Jun 5 12:53:22 CEST 2015


Hi,

On 05/06/15 00:37, Oliver Charles wrote:

> I believe the User option in systemd unit configuration should do this. 

I think you'll also need:

  systemd.services.my-unit.serviceConfig.CapabilityBoundingSet =
"CAP_NET_BIND_SERVICE";

Alternatively, socket activation combined with the User setting should work.

-- 
Eelco Dolstra | LogicBlox, Inc. | http://nixos.org/~eelco/


More information about the nix-dev mailing list