2026-04-03 15:59 UTC
so far today i have learned:
- dbus-daemon does not support #systemd DynamicUser (use dbus-broker)
- #polkit does not like DynamicUser (have to use real user)
- polkit does not support SupplementaryGroups (have to use real group membership)
- systemd does not like sudo, generally inhibits setuid (probably for the best)
and all i wanted was a minimal permissions thingy to remotely shutdown a raspberry pi...
Replies (1)
-
@fae@pony.social 2026-04-03 16:34
the solution ended up being fairly simple (use a real user and write a short polkit rule) but i tried a lot of other things along the way 😅 https://github.com/haku/esphome-host-exec/?tab=readme-ov-file#allowing-agent-to-call-shutdown