Hi,

>> The documentation patch I posted above gave me a working installation of 
>> radicale. If you still have permission error, maybe I can help you with some 
>> clue about the owner of radicale data and the systemd configuration used to 
>> run radical (e.g. systemctl cat [email protected]) and maybe an 
>> explicit error message.
>
> Thank you for your help. Before you responded, I got it working, largely 
> thanks to your documentation and freedombox's merge: 
> https://salsa.debian.org/freedombox-team/freedombox/-/merge_requests/2768.

Great!

> # create and enable [email protected] & [email protected]
> $ systemctl edit [email protected]
> [Service]
> User=radicale
> Group=radicale
> StateDirectory=radicale
> DynamicUser=no
>
> (I look forward to the Internet's feedback about how this is terrible 
> security practice)
>
> LinkingĀ /var/lib/radicale/collections/collection-root/${USER} to 
> ${HOMEDIR}/${radicale folder}/... works with the same permissions set under 
> init.d .

This is the particular part of your setup that makes you use DynamicUser=no.
You can also use ReadWritePaths=${HOMEDIR}/${radicale folder}

> Could we change radicale-uwsgi.conf & make uwsgi-app@radicale.{service, 
> socket} during package installation?

This would need a package update.

Thanks,

Alex

Reply via email to