Maxim Cournoyer schreef op za 17-04-2021 om 16:06 [-0400]:
> +                ;; Start the daemon.
> +                (define daemon-pid
> +                  (fork+exec-command
> +                   '#$(jami-daemon-configuration->command-line-arguments config)
> +                   #:user "jami"
> +                   #:group "jami"
> +                   #:environment-variables
> +                   (list (string-append "DBUS_SESSION_BUS_ADDRESS="
> +                                        "unix:path=/var/run/jami/bus"))))

It would be nice if this could be run in a container
that only has access to the relevant parts of the file system
(and not, say, /run/setuid-programs).  See, e.g., gnu/build/linux-container.scm.

Greetings,
Maxime.