Local control channel: unprivileged users can trigger --force-update via the running service

2026-09-21 23:00:38 +02:00
parent ca33a3db82
commit f707d07fd8
8 changed files with 387 additions and 23 deletions
@@ -17,6 +17,7 @@ func TestRenderUnit(t *testing.T) {
 		"WantedBy=multi-user.target",
 		"DynamicUser=yes",
 		"StateDirectory=gpu-turnstile",
+		"RuntimeDirectory=gpu-turnstile",
 		"ProtectSystem=strict",
 		"NoNewPrivileges=yes",
 		"RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6",