I need to use stunnel to encrypt a service that by itself does not support any type of encryption. stunnel needs to run on the frontend and on the backend server. Because stunnel does not come with a systemd service file I'm looking for ways how to achieve the following, each time the system boots or the service gets restarted:

  • create a directory under /var/run/ and assign it nobody:nobody ownership ( i want to run it in a root jail)
  • later on I would use pacemaker and corosyncto build a HA cluster, so the HA stack should track and manage on which cluster node to start stunnelat any given time

  • I would need to write a resource agent used by pacemakerto take action on the resource - in this case stunnel

My question is, what is the best way to handle it? Write my own service file for systemd? But what about the chroot directory that will contain the PID file for the servivce ? Do I need it then ?

I'd like to ask for some help to provide my some hints and ideas how to do it.

All help is more than appreciated!


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.