fix(deploy): drop nonexistent 'seat' supplementary group

systemd refuses to spawn the unit with code=216/GROUP when any group in
SupplementaryGroups= doesn't exist. Debian's seatd uses -g video — there
is no 'seat' group on the system. Removing it lets cage start; the video
group already covers seatd access.
This commit is contained in:
Mitchell R 2026-05-13 03:23:49 +02:00
parent 85a0bcae87
commit ad909e9c93
2 changed files with 4 additions and 2 deletions

View file

@ -164,7 +164,9 @@ if [ "${INSTALL_KIOSK}" = "1" ]; then
if ! id -u bfkiosk >/dev/null 2>&1; then if ! id -u bfkiosk >/dev/null 2>&1; then
useradd -m -s /usr/sbin/nologin bfkiosk useradd -m -s /usr/sbin/nologin bfkiosk
fi fi
for grp in video render input audio seat; do # Debian's seatd uses -g video (no separate 'seat' group) — only join groups
# that actually exist on this system.
for grp in video render input audio; do
if getent group "$grp" >/dev/null; then if getent group "$grp" >/dev/null; then
usermod -a -G "$grp" bfkiosk usermod -a -G "$grp" bfkiosk
fi fi

View file

@ -10,7 +10,7 @@ After=getty@tty1.service
Type=simple Type=simple
User=bfkiosk User=bfkiosk
Group=bfkiosk Group=bfkiosk
SupplementaryGroups=video render input audio seat SupplementaryGroups=video render input audio
PAMName=cage PAMName=cage
TTYPath=/dev/tty1 TTYPath=/dev/tty1
TTYReset=yes TTYReset=yes