jellyfin-server/fedora/jellyfin.sudoers

# Allow jellyfin group to start, stop and restart itself
Cmnd_Alias RESTARTSERVER_SYSTEMD = /usr/bin/systemd-run systemctl restart jellyfin
Cmnd_Alias STARTSERVER_SYSTEMD = /usr/bin/systemd-run systemctl start jellyfin
Cmnd_Alias STOPSERVER_SYSTEMD = /usr/bin/systemd-run systemctl stop jellyfin

jellyfin ALL=(ALL) NOPASSWD: RESTARTSERVER_SYSTEMD
jellyfin ALL=(ALL) NOPASSWD: STARTSERVER_SYSTEMD
jellyfin ALL=(ALL) NOPASSWD: STOPSERVER_SYSTEMD

Defaults!RESTARTSERVER_SYSTEMD !requiretty
Defaults!STARTSERVER_SYSTEMD !requiretty
Defaults!STOPSERVER_SYSTEMD !requiretty

# Allow the server to mount iso images
jellyfin ALL=(ALL) NOPASSWD: /bin/mount
jellyfin ALL=(ALL) NOPASSWD: /bin/umount

Defaults:jellyfin !requiretty
Port Fedora and CentOS builds and remove web build Simplifies a number of aspects of the RPM build, including moving .copr/Makefile into the "fedora/" folder (and leaving a symlink), removing the jellyfin-web build components, and renaming it jellyfin-server like Debian did. 2020-03-23 20:28:49 +00:00			`# Allow jellyfin group to start, stop and restart itself`
Use a service unit, not a scope unit, to restart Reportedly `systemd-run --scope` still got killed by the service manager; see #4615. The suspected cause is that `scope` units are run by the `systemd-run` process itself and inherit the caller's execution environment (see systemd-run(1)). To fix this, we use a systemd `service` unit instead, which is run and managed by PID 1 - hopefully this will isolate us sufficiently so that we don't get terminated along with `jellyfin.service`. 2020-12-05 00:08:49 +00:00			`Cmnd_Alias RESTARTSERVER_SYSTEMD = /usr/bin/systemd-run systemctl restart jellyfin`
			`Cmnd_Alias STARTSERVER_SYSTEMD = /usr/bin/systemd-run systemctl start jellyfin`
			`Cmnd_Alias STOPSERVER_SYSTEMD = /usr/bin/systemd-run systemctl stop jellyfin`
Port Fedora and CentOS builds and remove web build Simplifies a number of aspects of the RPM build, including moving .copr/Makefile into the "fedora/" folder (and leaving a symlink), removing the jellyfin-web build components, and renaming it jellyfin-server like Debian did. 2020-03-23 20:28:49 +00:00
			`jellyfin ALL=(ALL) NOPASSWD: RESTARTSERVER_SYSTEMD`
			`jellyfin ALL=(ALL) NOPASSWD: STARTSERVER_SYSTEMD`
			`jellyfin ALL=(ALL) NOPASSWD: STOPSERVER_SYSTEMD`

			`Defaults!RESTARTSERVER_SYSTEMD !requiretty`
			`Defaults!STARTSERVER_SYSTEMD !requiretty`
			`Defaults!STOPSERVER_SYSTEMD !requiretty`

			`# Allow the server to mount iso images`
			`jellyfin ALL=(ALL) NOPASSWD: /bin/mount`
			`jellyfin ALL=(ALL) NOPASSWD: /bin/umount`

			`Defaults:jellyfin !requiretty`