systemd-run
Shares rank 73 of 86 privilege escalation tools by recommenders
Runs programs as transient systemd units to cap memory and CPU or sandbox them. Critics wonder whether its isolation is enough.
Runs programs as transient systemd units to cap memory and CPU or sandbox them. Critics wonder whether its isolation is enough.
5 people gave an opinion
- recommend it
- 5
- criticize it
- 0
- approval share
- 100%
Recommended in 5 of 13 months
- November 2025: not recommended
- December 2025: recommended
- January 2026: not recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: not recommended
- May 2026: not recommended
- June 2026: recommended
- July 2026: not recommended
- August 2026: not recommended
- September 2026: not recommended
- October 2026: recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 5 people recommend itNeeds 10 or more, not met.
- Nobody criticizes itNeeds 2 to 1 or better, met.
- Recommended in 5 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Sandboxes AI agents with security properties
“agents should be operated via `systemd-run` as a transient scope unit with the necessary security properties set”
Comment from 28 Mar 2026 in “Don't YOLO your file system” Limits memory and CPU for browsers
“systemd-run --user --scope -p MemoryHigh=XG -p MemoryMax=X+2G firefox”
Comment from 1 Oct 2026 in “Micron CEO Says Memory Supply Will Be Much Tighter in 2027 and 2028 Than in 2026” “I use `systemd-run` to run browsers with CPU quotas applied.”
Comment from 29 Dec 2025 in “As AI gobbles up chips, prices for devices may rise”
What people warn about
Each mark is one comment
Doubts its isolation is strong enough
“I do wonder what isolation something like systemd-run can offer, if that is enough.”
Comment from 3 Feb 2026 in “Sandboxing AI Agents in Linux”
Other privilege escalation tools people recommend
The four most recommended other privilege escalation tools, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
See all 86 privilege escalation tools, rankedWhat people said
4 of the 5 comments that mention it, newest first. Each links to the original comment.
“systemd-run --user --scope -p MemoryHigh=XG -p MemoryMax=X+2G firefox”
“agents should be operated via `systemd-run` as a transient scope unit with the necessary security properties set”
“I do wonder what isolation something like systemd-run can offer, if that is enough.”
“I use `systemd-run` to run browsers with CPU quotas applied.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.