Re: The saga of wrestling with systemd (was) Re: logrotate options?

> Am 23.01.22 um 19:35 schrieb Joe Acquisto-j4:
>>> On Thu, Jan 20, 2022 at 11:34:26AM +0200, Peter Pentchev wrote:
>>> [snip]
>>>> directory if necessary). Something like this works for me (note that
>>>> I do not have a logfile directive in my fetchmail config file, so
>>>> it will send its output to the standard output stream by default):
>>>>
>>>>    [roam@straylight ~]$ cat ~/.config/systemd/user/fetchmail.service
>>>>    [Unit]
>>>>    Description=Run fetchmail in daemon mode.
>>>>    Documentation=man:fetchmail(1)
>>>>    After=network-online.target
>>>>    Wants=network-online.target
>>>>
>>>>    [Service]
>>>>    Type=simple
>>>>    ExecStartPre=-fetchmail -ve200
>>>>    ExecStart=fetchmail -ve25 -Nd120
>>>>    ExecStop=fetchmail --quit
>>>>    KillMode=process
>>> ...and of course, I forgot two lines that are kind of important:
>>>
>>> [Install]
>>> WantedBy=default.target
>>>
>>> G'luck,
>>> Peter
>>>
>>> --
>> Thanks to all.
>>
>> This is how I achieved success (getting Fetchmail to start and stop in 
> systemd world that is):
>>
>> -------------------------------------
>> [Unit]
>> Description=remote-mail retrieval utility runin daaemon mode
>> After=network.target
>> Wants=network.target
>>
>> [Service]
>> Type=simple
>> EnvironmentFile=/root/.fetchmailrc
>> #User=fetchmail
> 
> 
> Guys, seriously, do not run fetchmail as root user. This is generally
> bad practice, violating the principle of least privilege. Create that
> fetchmail user, move the .fetchmailrc and possibly .fetchids files,
> change their owner, and then run as fetchmail user.
> 
> I will take this feature away in a future version and without
> replacement to protect you while you pretend to be innocent. The
> warnings have been there for long enough.
> 
> 

So, in poking about to prepare for the anticipated wailing and gnashing of teeth,
I attempted to create user fetchmail, only to discover an exiting system user
named fetchmail, member of group daemon.

This gives me pause.    

joe a.