this post was submitted on 23 May 2025
93 points (96.0% liked)

homeassistant

14635 readers
2 users here now

Home Assistant is open source home automation that puts local control and privacy first. Powered by a worldwide community of tinkerers and DIY enthusiasts. Perfect to run on a Raspberry Pi or a local server. Available for free at home-assistant.io

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] jj4211@lemmy.world 1 points 2 weeks ago

Funny part is I'm responsible for some software which needs just a little privilege.

The direct install option runs as a broadly unprivileged user, thanks to systemd service for imparting one, surgical ambient capability to the process.

A team that wraps it in a container however demands it be run privileged, because they say the container runtimes dont support the same granularity, so the container users end up with unreasonable privileges while the direct install users are almost completely running unprivileged.