The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
grafana/docs/sources/shared/systemd/bind-net-capabilities.md

1.0 KiB

labels title
[{products [enterprise oss]}] Serving Grafana on a port < 1024

If you are using systemd and want to start Grafana on a port that is lower than 1024, you must add a systemd unit override.

  1. Run the following command to create an override file in your configured editor.

    # Alternatively, create a file in /etc/systemd/system/grafana-server.service.d/override.conf
    sudo systemctl edit grafana-server.service
    
  2. Add the following additional settings to grant the CAP_NET_BIND_SERVICE capability.

    To learn more about capabilities, refer to capabilities(7) — Linux manual page.

    [Service]
    # Give the CAP_NET_BIND_SERVICE capability
    CapabilityBoundingSet=CAP_NET_BIND_SERVICE
    AmbientCapabilities=CAP_NET_BIND_SERVICE
    
    # A private user cannot have process capabilities on the host's user
    # namespace and thus CAP_NET_BIND_SERVICE has no effect.
    PrivateUsers=false