riskiwah / systemd-playground

systemd-rollback

A place where going to POC-ing dynamic variable at systemd stuffs

Demo time

1. Place unit file ([e-mail]) to /etc/systemd/system
2. Move dyanmic variable file rollback@rollback-dynamic at /opt/systemd-rollback/
3. Enable it

   $ sudo systemctl enable --now rollback@rollback-dynamic

4. Restart service

   $ sudo systemctl daemon-reload
   
   ## OR
   
   $ sudo systemctl restart [e-mail]

5. Enjoy 😀

Some notes

while trigger the change, we can watch or follow the log changes with journalctl -u [e-mail] -f

Some Great write up/sources

• https://ivanmorenoj.medium.com/ssh-tunnel-as-systemd-service-3c53bd157ac1
• https://vincent.bernat.ch/en/blog/2017-systemd-golang
• https://github.com/konstruktoid/hardening/blob/master/systemd.adoc
• https://nickb.dev/blog/writing-a-secure-systemd-service-with-sandboxing-and-dynamic-users