EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Aug 8·5 min read
Systemd Dynamic Users (2020)
TL;DR
Systemd introduces Dynamic Users, allowing temporary user creation for service units without modifying /etc/passwd. This feature enhances security and simplifies user management for transient services.
✦ Why It Matters
Consider using Dynamic Users for your transient services to enhance security and simplify user management.
Key Takeaways
- Utilize Dynamic Users to avoid permanent user accounts for services.
- Leverage State Directories for persistent data storage between service runs.
- Simplify service installation by eliminating user management tasks.
- Enhance security by running applications like Steam in a sandboxed environment.
How It Works
Dynamic Users are created at runtime by systemd for each service, allowing for unique user instances that exist only during the service's execution. This mechanism reduces the attack surface by ensuring that no permanent user accounts are left behind, and it allows for specific permissions and capabilities to be assigned to these temporary users.