'Twas brillig, and Antonio at 23/01/13 15:54 did gyre and gimble: > > > Am 23.01.2013 16:29, schrieb Antonio: >>>> and why do you not use the User= and Group= options? >>> >>> Because they are not required by instructions. > >> as also runuser, but one is native systemd the other not > > runuser is already written in the file.
Well, whereever that file came from, it's wrong. systemd has built in tools to switch user and they should be used as things like runuser and su have a tendency to create their own sessions which is often not what you want. >>> However I have just tried but permission error remains. >>> >>> ... User=antonio Group=antonio ... > >> what about NOT reply offlist and provide informations like the >> output of "systemctl status" as also the current content of the >> unit-file? > > I'm replying even on systemd-devel list. > I'm working with unit-file on Fedora ARM on Raspberry but I'm also > replying you by Fedora on notebook. > > However: http://www.fpaste.org/NA2M/ That unit looks messy :s Try this: [Unit] Description=Remote desktop service (VNC) After=network.target [Service] Type=forking User=antonio Group=antonio ExecStartPre=-/usr/bin/vncserver -kill %i ExecStart=/usr/bin/vncserver %i -geometry 1024x600 -depth 24 -fp /usr/share/X11/fonts/misc ExecStop=/usr/bin/vncserver -kill %i [Install] WantedBy=multi-user.target Some notes: 1. syslog.target is old and not needed in recent systemd's 2. No need to shell out and ignore the return value of the Pre command. Use the - after the equals to ignore the return value of the command. It's output will be logged in the journal but that's fine IMO. 3. User=/Group= is a built in way to set the user and group. You should drop runuser completely as it's totally unneeded - systemd has this built in as documented in the manual. 4. I'm not sure of the %i usage above. You r spec mixed and matched a hard-coded :1 and some use of %i. If your service is vncserver@1.service, then you'll want to include the : in the commands, but if you are e.g. using vncserver@5900.service then I guess it's just an absolute number? (I forget the syntax of VNC server so forgive me if this is wrong!) 5. If you ultimately try to run vncserver with a 1 argument (meaning desktop :1 but actually translated directly as tcp port 1 then this may account for a permission error (regular users cannot listen on TCP ports < 1024). Make sure you get your :1 vs. 1 correct. HTHs -- Colin Guthrie gmane(at)colin.guthr.ie http://colin.guthr.ie/ Day Job: Tribalogic Limited http://www.tribalogic.net/ Open Source: Mageia Contributor http://www.mageia.org/ PulseAudio Hacker http://www.pulseaudio.org/ Trac Hacker http://trac.edgewall.org/ _______________________________________________ systemd-devel mailing list systemd-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/systemd-devel
