Lennart Poettering on Nostr: …appropriate for systemd-nspawn with its goal of running a full init system inside ...

…appropriate for systemd-nspawn with its goal of running a full init system inside a container environment, but inappropriate for system services, that should be integrated into the host even if they run at a lower security level, with sandboxing applied.

So, what changed? We realized over time that the logic systemd-nspawn implements is to a large degree the same as the one service management implements, and we basically have two implementations of some non-trivial code in place.

Moreover, …