@cazabon your whole argument goes down the drain, once you accept that #systemd is far more than just an init system/service manager.

Harden your UniFi Controller with a systemd drop-in: sandboxing, read-only filesystem, private tmp, and memory caps. Solid hardening on Ubuntu 22.04+/Debian 12+.
https://www.valtersit.com/vault/harden-unifi-controller-with-systemd-sandboxing-and-resource-6bd076/
#unifi #systemd #hardening
Catch systemd unit syntax errors with systemd-analyze verify and score sandboxing exposure (0.0 to 10.0) via systemd-analyze security before deploying.
#systemd #hardening #ValtersIT
https://www.valtersit.com/vault/validate-and-analyze-unit-hardening-score-before-deployment-db6f18/
Gestire systemd su Linux diventa più semplice con SysD Manager, un'interfaccia grafica per controllare servizi, timer, socket, log e dipendenze senza affidarsi esclusivamente al terminale. #Linux #Systemd #OpenSource #SysAdmin #LinuxEasy www.linuxeasy.org/sysd-manager...
[LWN.net] [$] The state of systemd: 2026 edition
#Podman #Docker #ContainerSecurity #systemd
For many people, running containers is synonymous with Docker. The reality is that the image format is an open OCI standard and Docker is just one engine among several. Podman runs the same Docker Hub images with very similar
Lock down Node.js with systemd sandboxing: ProtectSystem, ProtectHome, PrivateTmp for namespace isolation and strict resource controls. Full unit config:
https://www.valtersit.com/vault/hardened-systemd-service-unit-with-process-sandboxing-for-no-55fa6e/
#systemd #nodejs #ValtersIT
Neues Tool klont #Linux :tux: -Systeme per #systemd-Container | heise online https://www.heise.de/news/sdme-Das-eigene-Linux-als-Container-klonen-11472031.html #Virtualisierung #virtualization
SysV init vs systemd.
Sequential scripts and runlevels versus parallel, dependency-aware startup. What changed and why.
Montray - a tray icon for systemd service health https://lobste.rs/s/gveu0c #linux #systemd
Eine API für #Linux :tux: : Remote-Verwaltung mit #systemd | heise online https://www.heise.de/news/Eine-API-fuer-Linux-Remote-Verwaltung-mit-systemd-11472737.html
Using docker-compose with Podman rootless https://lobste.rs/s/tpxwfe #linux #devops #virtualization #systemd
Linux-Systeme mit systemd klonen
linuxnews.de/linux-system...
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #systemd #Container
Me: starts a Wireguard connection with it's DNS server and sets it only for address classes behind the VPN.
systemf-resolved: that DNS server is now the only and mandatory DNS for the whole system.
(I know this probably only because my DNS server is currently unreachable.)