[bug#47849] [PATCH 1/1] services: Add a service for the Jami daemon.

[Maxim Cournoyer]

Hi again,

Maxime Devos <maximedevos@telenet.be> writes:

> Maxim Cournoyer schreef op za 17-04-2021 om 16:06 [-0400]:
>> +                ;; Start the daemon.
>> +                (define daemon-pid
>> +                  (fork+exec-command
>> +                   '#$(jami-daemon-configuration->command-line-arguments 
>> config)
>> +                   #:user "jami"
>> +                   #:group "jami"
>> +                   #:environment-variables
>> +                   (list (string-append "DBUS_SESSION_BUS_ADDRESS="
>> +                                        "unix:path=/var/run/jami/bus"))))
>
> It would be nice if this could be run in a container
> that only has access to the relevant parts of the file system
> (and not, say, /run/setuid-programs).  See, e.g., 
> gnu/build/linux-container.scm.

I agree!  The opendht service is already doing so, so it should not be
too difficult I believe.  I'll try looking into it, after the 1.3.0
release is done.

Thank you!

Maxim