Launcher Administration
Running the Launcher
Once configured, you can run the Job Launcher via service by executing the command sudo rstudio-launcher start
. The Launcher service needs root privilege for performing authentication and authorization, as well as providing any child plugin processes with root privilege (as needed). After initial setup, the Job Launcher lowers its privilege to the server user (see Configuration options for more information).
If the Job Launcher service fails to start and continue running, one of its plugins exited in failure and is likely not configured properly. It is often easier to run the Job Launcher in the terminal directly when getting it set up for the first time so you can more easily see any reported errors and more quickly test configuration changes. In order to run from the console, execute the command sudo /usr/lib/rstudio-server/bin/rstudio-launcher
. If you are still having troubles starting the service, see Launcher Troubleshooting.
If the Launcher was installed from outside of Posit Workbench, the Launcher service is not automatically configured to start on system startup, and you must enable this manually if desired by using the following commands:
systemd
systemctl enable rstudio-launcher.service
System V
chkconfig --add rstudio-launcher
Launcher account permissions
The Job Launcher runs as the system root user during startup and then drops this privilege and runs as a more restricted user.
The user account that the Job Launcher runs under in normal course of operations is rstudio-server
. This account is automatically added to the system when Posit Workbench is installed, and is created as a system rather than end user account (i.e., the --system
flag is passed to useradd
).
You can configure the Job Launcher so that it will run from an alternate account with the following steps:
- Create a new system user (if the one you want to use doesn’t already exist)
- Assign this user to the
server-user
option in the/etc/rstudio/launcher.conf
configuration file - Restart the Job Launcher service
For example, to shutdown the server and create a new system user named rs-user
, you’d use the following commands:
sudo rstudio-launcher stop
sudo useradd --system rs-user
Then edit the /etc/rstudio/launcher.conf
configuration file as follows:
/etc/rstudio/launcher.conf
server-user=rs-user
Finally, restart the Job Launcher to begin running under the new user:
sudo rstudio-launcher restart