Re: Service to start a go service as none-root
Michael Osipov <[email protected]>
| Newsgroups | gmane.os.freebsd.devel.ports |
|---|---|
| Message-ID | <[email protected]> |
Hi Matthias,
this one is tricky because:
> : ${monitorsolar_user:="gitlab_deploy_solar"}
> : ${monitorsolar_group:="gitlab_deploy_solar"}
Instruct the RC system to do a "su - ...", and then daemon(8) tries to
drop privs. It cannot work. I had the same issue with a custom Go
service here at work. Remove "-u ..." from ${command} and it will work.
I haven't investigated yet how to have only daemon(8) to drop privs. See
"man 8 rc.subr" as well. It is documented.
Michael