linux-systemd-manager

Generate, debug, and harden systemd units with sandboxing and safety checks.

3|1|Updated Feb 24, 2026
One-click install
npx skills add https://github.com/chfle/lehnert-claude-skills --skill linux-systemd-manager
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: linux-systemd-manager
Source: https://github.com/chfle/lehnert-claude-skills/tree/main/skills/linux-systemd-manager
Command: npx skills add https://github.com/chfle/lehnert-claude-skills --skill linux-systemd-manager

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manage, debug, and harden systemd units (service, timer, socket, path) across Linux environments with automated templates and safety checks.

Core Features & Use Cases

  • Create hardened service units with restart policies, resource limits, and sandboxing.
  • Generate timer and socket units paired with their companion services for scheduling.
  • Debug failed units and perform security hardening audits with guided workflows.

Quick Start

Describe your desired systemd unit and the tool will generate a complete, hardened unit ready to install.

Frequently Asked Questions about linux-systemd-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a hardened systemd service unit with sandboxing and resource limits?

You generate a systemd service unit configured with sandboxing directives, restart policies, and resource limits. This produces a hardened, ready-to-install configuration that restricts service permissions and enforces safety checks.

What is the best way to schedule tasks using systemd timers instead of cron?

The best way to schedule tasks is to generate a paired systemd timer and companion service unit. This replaces cron with integrated scheduling, automatic logging, and robust dependency management for automated execution.

How do I debug a failed systemd service unit?

You debug a failed systemd service by running guided diagnostic workflows that inspect unit status and logs. This identifies configuration errors and applies corrective safety checks to restore the service.

Can I use systemd socket activation for per-connection service activation?

Yes, you can use systemd socket activation for per-connection activation. You generate a paired socket unit and companion service, allowing systemd to dynamically start the service upon incoming connections, saving idle resources.

How do I perform a security hardening audit on existing systemd units?

You perform a security hardening audit on systemd units by running guided workflows that analyze existing configurations. This process identifies weak sandboxing settings and applies resource limits and safety checks to harden the unit.

Does systemd auto-start on boot require specific unit configuration?

Yes, systemd auto-start on boot requires generating a service unit with an enabled install section and restart policies. This ensures the service automatically launches during system boot and recovers from unexpected failures.