[Howto] Run programs as non-root user on privileged ports via Systemd

Running programs as a non-root user is must in security sensitive environments. However, these programs sometimes need to publish their service on privileged ports like port 80 – which cannot be used by local users. Systemd offers a simple way to solve this problem. Background Running services as non-root users is a quite obvious: if … Continue reading [Howto] Run programs as non-root user on privileged ports via Systemd

[Howto] Workaround failing MongoDB on RHEL/CentOS 7

MongoDB is often installed right from upstream provided repositories. In such cases with recent updates the service might fail to start via systemctl. A workaround requires some SELinux work. Ansible Tower collects system data inside a MongoDB. Since MongoDB is not part of RHEL/CentOS, it is installed directly form the upstream MongoDB repositories. However, with … Continue reading [Howto] Workaround failing MongoDB on RHEL/CentOS 7