working non-root fossil-test (depends on libnss-systemd

1 files changed, 15 insertions, 6 deletions

diff --git a/src/fossil-test@.service b/src/fossil-test@.service
index 96b9f98..1bdd39f 100644
--- a/src/fossil-test@.service
+++ b/src/fossil-test@.service
@@ -3,13 +3,22 @@ Description = Endofossil Test: Clone over SSH using fresh identity
 
 [Service]
 Type = oneshot
-TemporaryFileSystem = /root
-Environment = HOME=/root
-WorkingDirectory = /root
+PrivateUsers = yes
+DynamicUser = yes
+
+User = fossil-test-user-%i
+RuntimeDirectory = fossil-test-%i
+BindPaths = /run/fossil-test-%i:/.ssh
+Environment = HOME=/run/fossil-test-%i
+WorkingDirectory = /run/fossil-test-%i
+
 ExecStart = sh -exc '\
-mkdir .ssh .ssh/known_hosts.d; \
+! touch /test.file; \
+ln -s . .ssh; \
+mkdir .ssh/known_hosts.d; \
 ssh-keygen -t ed25519 -f .ssh/id_ed25519 -N ""; \
-ssh -o BatchMode=yes -o StrictHostKeyChecking=accept-new %i@localhost :; \
-ssh -o BatchMode=yes -o StrictHostKeyChecking=yes %i@localhost fossil uptime; \
+ssh -o BatchMode=yes -o StrictHostKeyChecking=accept-new -- %i@localhost :; \
+ssh -o BatchMode=yes -o StrictHostKeyChecking=yes        -- %i@localhost uptime; \
+cd .ssh; \
 fossil clone ssh://%i@localhost/src/fossil/db db~$(date -Ins).fossil; \
 '