fredrik/sensorpajen
1
0
Fork 0
Code Issues Pull Requests Projects Releases 2 Wiki Activity

Update ROADMAP: Document Phase 6 lessons learned

Browse Source 
Key discoveries during systemd service implementation:
- AmbientCapabilities doesn't work in user services
- NoNewPrivileges prevents file capabilities
- Must use setcap with readlink -f on actual binary
This commit is contained in:
fredrik
2025-12-27 14:18:28 +01:00
parent f36257226f
commit c1519b3eb5
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ROADMAP.md
View File

@@ -289,11 +289,17 @@ config/sensorpajen.env
- User service for easier management (no sudo required) - User service for easier management (no sudo required)
- Service ready for installation on Raspberry Pi - Service ready for installation on Raspberry Pi
- Comprehensive documentation provided - Comprehensive documentation provided
- **Important discoveries**:
- `AmbientCapabilities` does NOT work in user services (only system services)
- Must use `setcap` on the Python binary instead
- `NoNewPrivileges=true` prevents file capabilities from working - must be disabled
- Capabilities must be set on actual binary, not symlinks: `setcap ... $(readlink -f python3)`
#### Tasks: #### Tasks:
- ✅ Created systemd/sensorpajen.service - ✅ Created systemd/sensorpajen.service
- ✅ Created systemd/README.md with full documentation - ✅ Created systemd/README.md with full documentation
- ✅ Service management and troubleshooting guides included - ✅ Service management and troubleshooting guides included
- ✅ Tested and verified working on Raspberry Pi
--- ---