bab389114b
Reportedly `systemd-run --scope` still got killed by the service manager; see #4615. The suspected cause is that `scope` units are run by the `systemd-run` process itself and inherit the caller's execution environment (see systemd-run(1)). To fix this, we use a systemd `service` unit instead, which is run and managed by PID 1 - hopefully this will isolate us sufficiently so that we don't get terminated along with `jellyfin.service`.
38 lines
1.7 KiB
Plaintext
38 lines
1.7 KiB
Plaintext
#Allow jellyfin group to start, stop and restart itself
|
|
Cmnd_Alias RESTARTSERVER_SYSV = /sbin/service jellyfin restart, /usr/sbin/service jellyfin restart
|
|
Cmnd_Alias STARTSERVER_SYSV = /sbin/service jellyfin start, /usr/sbin/service jellyfin start
|
|
Cmnd_Alias STOPSERVER_SYSV = /sbin/service jellyfin stop, /usr/sbin/service jellyfin stop
|
|
Cmnd_Alias RESTARTSERVER_SYSTEMD = /usr/bin/systemd-run systemctl restart jellyfin
|
|
Cmnd_Alias STARTSERVER_SYSTEMD = /usr/bin/systemd-run systemctl start jellyfin
|
|
Cmnd_Alias STOPSERVER_SYSTEMD = /usr/bin/systemd-run systemctl stop jellyfin
|
|
Cmnd_Alias RESTARTSERVER_INITD = /etc/init.d/jellyfin restart
|
|
Cmnd_Alias STARTSERVER_INITD = /etc/init.d/jellyfin start
|
|
Cmnd_Alias STOPSERVER_INITD = /etc/init.d/jellyfin stop
|
|
|
|
|
|
jellyfin ALL=(ALL) NOPASSWD: RESTARTSERVER_SYSV
|
|
jellyfin ALL=(ALL) NOPASSWD: STARTSERVER_SYSV
|
|
jellyfin ALL=(ALL) NOPASSWD: STOPSERVER_SYSV
|
|
jellyfin ALL=(ALL) NOPASSWD: RESTARTSERVER_SYSTEMD
|
|
jellyfin ALL=(ALL) NOPASSWD: STARTSERVER_SYSTEMD
|
|
jellyfin ALL=(ALL) NOPASSWD: STOPSERVER_SYSTEMD
|
|
jellyfin ALL=(ALL) NOPASSWD: RESTARTSERVER_INITD
|
|
jellyfin ALL=(ALL) NOPASSWD: STARTSERVER_INITD
|
|
jellyfin ALL=(ALL) NOPASSWD: STOPSERVER_INITD
|
|
|
|
Defaults!RESTARTSERVER_SYSV !requiretty
|
|
Defaults!STARTSERVER_SYSV !requiretty
|
|
Defaults!STOPSERVER_SYSV !requiretty
|
|
Defaults!RESTARTSERVER_SYSTEMD !requiretty
|
|
Defaults!STARTSERVER_SYSTEMD !requiretty
|
|
Defaults!STOPSERVER_SYSTEMD !requiretty
|
|
Defaults!RESTARTSERVER_INITD !requiretty
|
|
Defaults!STARTSERVER_INITD !requiretty
|
|
Defaults!STOPSERVER_INITD !requiretty
|
|
|
|
#Allow the server to mount iso images
|
|
jellyfin ALL=(ALL) NOPASSWD: /bin/mount
|
|
jellyfin ALL=(ALL) NOPASSWD: /bin/umount
|
|
|
|
Defaults:jellyfin !requiretty
|