docs: Updates installation instruction for Debian/Ubuntu (#64232)
* draft changes * Apply suggestions from code review Co-authored-by: Dan Cech <dcech@grafana.com> * reworks debian/ubuntu instructions, updates start server topic * Apply suggestions from code review Co-authored-by: Dan Cech <dcech@grafana.com> * incorporates feedback; restructures to align with writers toolkit guidelines * Apply suggestions from code review Co-authored-by: Dan Cech <dcech@grafana.com> * tweaks structure of server topic; renames directory, corrects relrefs * corrects spelling * Apply suggestions from code review Co-authored-by: Dan Cech <dcech@grafana.com> * removed web parameter * removes unnecessary word * incorporates feedback from internal reviewer * updates alias * updates alias * adjust alias --------- Co-authored-by: Dan Cech <dcech@grafana.com>
This commit is contained in:
co-authored by
Dan Cech
parent
b90aed4fd7
commit
13af5afaf3
@@ -2,24 +2,26 @@
|
||||
title: Serving Grafana on a port < 1024
|
||||
---
|
||||
|
||||
If you are using `systemd` and want to start Grafana on a port that is less than 1024, then you must add a `systemd` unit override.
|
||||
If you are using `systemd` and want to start Grafana on a port that is lower than 1024, you must add a `systemd` unit override.
|
||||
|
||||
1. The following command creates an override file in your configured editor:
|
||||
1. Run the following command to create an override file in your configured editor.
|
||||
|
||||
```bash
|
||||
# Alternatively, create a file in /etc/systemd/system/grafana-server.service.d/override.conf
|
||||
systemctl edit grafana-server.service
|
||||
```
|
||||
```bash
|
||||
# Alternatively, create a file in /etc/systemd/system/grafana-server.service.d/override.conf
|
||||
systemctl edit grafana-server.service
|
||||
```
|
||||
|
||||
1 Add these additional settings to grant the `CAP_NET_BIND_SERVICE` capability. To read more about capabilities, see [the manual page on capabilities.](https://man7.org/linux/man-pages/man7/capabilities.7.html)
|
||||
1. Add the following additional settings to grant the `CAP_NET_BIND_SERVICE` capability.
|
||||
|
||||
```
|
||||
[Service]
|
||||
# Give the CAP_NET_BIND_SERVICE capability
|
||||
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
|
||||
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
||||
To learn more about capabilities, refer to [capabilities(7) — Linux manual page](https://man7.org/linux/man-pages/man7/capabilities.7.html).
|
||||
|
||||
# A private user cannot have process capabilities on the host's user
|
||||
# namespace and thus CAP_NET_BIND_SERVICE has no effect.
|
||||
PrivateUsers=false
|
||||
```
|
||||
```
|
||||
[Service]
|
||||
# Give the CAP_NET_BIND_SERVICE capability
|
||||
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
|
||||
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
||||
|
||||
# A private user cannot have process capabilities on the host's user
|
||||
# namespace and thus CAP_NET_BIND_SERVICE has no effect.
|
||||
PrivateUsers=false
|
||||
```
|
||||
|
||||
Reference in New Issue
Block a user