Commit graph

13 commits

Author SHA1 Message Date
ohdearaugustin
5da2ce698f Fix idempotency create file 2022-04-05 23:01:09 +02:00
Pig Monkey
d9cd95e9fa use default firejail mpd profile
requires >= 0.9.52
2017-12-26 16:39:41 -08:00
Pig Monkey
8d499dc7f7 remove firejail generic.profile
include the appropriate files instead
2017-07-29 16:11:31 -07:00
Pig Monkey
e2aed9edd7 update firejail profiles
Remove references to disable-more.inc

Remove some profiles which are now redundant with the Firejail default
profiles.
2017-07-29 16:07:34 -07:00
Pig Monkey
f2ae6451e8 fix mpd unit target
The multi-user target does not exist for user services.
2016-12-17 18:49:02 -08:00
Pig Monkey
938e8d27ff provide mpd user service
The Arch package used to provide this. Now it doesn't.

To use this, you'd just enable and start it as your user.

    $ systemctl --user enable mpd.service
    $ systemctl --user start mpd.service

Existing users can remove the override we used to install, since that is
now redundant.

    # rm -r /etc/systemd/user/mpd.service.d
2016-12-11 21:48:52 -08:00
Pig Monkey
6e923a2ed4 update mpd firejail profile
The seccomp filter that is now in Firejail's generic profile was causing
issues.
2016-11-10 18:45:32 -08:00
Pig Monkey
940a1627a2 leave mpd firejail whitelisting up to the user 2016-04-06 19:56:38 -07:00
Pig Monkey
5187c982aa automatically include firejail profiles 2016-04-02 10:28:48 -07:00
Pig Monkey
162275436c update mpd firejail profile 2016-03-31 20:58:40 -07:00
Pig Monkey
f2485a2781 simplify firejail profiles with our own generic profile 2016-03-31 20:42:23 -07:00
Pig Monkey
f5e6e6b373 jail ncmpcpp 2016-03-31 20:28:07 -07:00
Pig Monkey
b6bcff0265 jail mpd
Ansible doesn't seem to have a way to interact with systemd user
instances. All the prep is done, but the user still needs to manually
enable and start the mpd user service.

    $ systemd --user enable mpd.service
    $ systemd --user start mpd.service

Alternatively, the user could include mpd in their shell profile,
xinitrc, or just call it whenever they want it to run. We jail mpd in
/usr/local/bin, just like everything else.

    $ mpd
2016-03-31 20:17:39 -07:00