![[Howto] Using systemd timers instead of /etc/cron entries](https://liquidat.files.wordpress.com/2021/04/departure-542550_1920.jpg?w=1200)
Executing certain commands at given intervals or times is a very typical task for system administrators. In the past it was common to use cron or some variation for this, in some way or the other.
Background
Cron does the job it was written for. But this was years ago, and these days Kernels offer neat things like CPU quotas and memory limits. Cron has no means to use those – but other tools have.
Additionally, newer tools provide dependencies, a proper configuration language (instead of hard-to-maintain bash lines), multiple triggers, randomized delays and real logging.
Especially the last bit, real logging, is essential: Cron can forward log messages it thinks needs to be forwarded. But without real kernel backed process management (cgroups) there is no real way for Cron to see if a job is running or has finished, and what log lines belong to it.
Systemd has all this – and thus it makes sense to create new recurrent jobs in Systemd and even migrate old ones sometimes.
Setting up the timer
What is needed are two things: a service file describing WHAT should be done, and a timer file describing WHEN to do it.
Let’s start with the WHAT: we create a typical service file named backupjob.service executing a backup bash script:
[Unit]
Description=Backup job
[Service]
Type=oneshot
ExecStart=/usr/local/bin/backup.shNote that we do not enable the service here! We can start it for quick and easy debugging – which is also way easier than with Cron.
Keep in mind that this is a typical systemd service. You can also add requirements, dependencies, performance options and so on in a standardized fashion. With Cron this is not possible, would have to be done in the bash script itself and thus would be messy, hard to maintain, and most likely duplicate work between multiple Cron jobs. And btw.: that way not at all following the UNIX philosophy!
Next, the WHEN. We need a timer file, something which describes when to execute the service, backupjob.timer.
[Unit]
Description=Run backup jobs regularly
[Timer]
OnCalendar=daily
AccuracySec=1h
Unit=backupjob.service
[Install]
WantedBy=timers.targetAs you can see, this job is scheduled to run daily, with an accuracy of 1 hour. The accuracy is an interesting bit: systemd tries to avoid starting all services at the exact same time, to avoid massive system load at :00. Just recently a technician at a large cloud provider mentioned that data centers could be designed way more efficient if not everyone would put their Cron jobs to the full minute.
Speaking about, besides OnCalendar there is also a way to start jobs relative to the boot up time, or relative to when the timer was run last. For example, to run something every 15 minutes, set OnActiveSec=15min. More information can be found in the timer documentation.
Starting and stopping the timer
As mentioned above, the service unit files are not activated, instead the timers are: sudo systemctl enable --now backupjob.timer
Stopping a timer is equally simple: systemctl stop backupjob.timer . If you want to avoid that it is started again during the next boot, also disable it: systemctl disable backupjob.timer.
Additional tooling
One of the great things of using the systemd ecosystem is that it is very easy to work with timers: with systemctl list-timers a nice and clear overview of the current state and time of next execution is given:
❯ sudo systemctl list-timers
[sudo] password for liquidat:
NEXT LEFT LAST PASSED UNIT ACTIVATES
Thu 2021-04-15 18:06:34 CEST 1h 14min left Thu 2021-04-15 16:09:32 CEST 42min ago dnf-makecache.timer dnf-makecache.service
Fri 2021-04-16 00:00:00 CEST 7h left Thu 2021-04-15 00:01:01 CEST 16h ago logrotate.timer logrotate.service
Fri 2021-04-16 00:00:00 CEST 7h left Thu 2021-04-15 00:01:01 CEST 16h ago mlocate-updatedb.timer mlocate-updatedb.service
Fri 2021-04-16 00:00:00 CEST 7h left Thu 2021-04-15 00:01:01 CEST 16h ago unbound-anchor.timer unbound-anchor.service
Fri 2021-04-16 12:32:32 CEST 19h left Thu 2021-04-15 12:32:32 CEST 4h 19min ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service
Mon 2021-04-19 01:34:34 CEST 3 days left Mon 2021-04-12 15:46:39 CEST 3 days ago fstrim.timer fstrim.service
6 timers listed.
Pass --all to see loaded but inactive timers, too.At the same time, you can get the detailed status with systemctl status logrotate.timer – or of all of them via systemctl status *timer.
Logs are simply available via journalctl -u logrotate.timer – and the logs for the executed service can be read via journalctl -u logrotate.service.
And if you just don’t want to deal with systemd files right now – but nevertheless want all the goods from it, you can also launch systemd services or general commands with a one-time execution:
systemd-run --on-active="10h 30m" --unit myonetimescript.serviceFinal words
Writing systemd timers instead of traditional Cron jobs makes operating, maintaining and even writing of recurrent jobs much easier.
The only thing you might be missing is easily sending out stuff via mail.
Image by Ryan McGuire from Pixabay
![[Howto] Run programs as non-root user on privileged ports via Systemd [Update]](https://liquidat.files.wordpress.com/2018/01/cables-1080569_1920.jpg?w=1200)
Running programs as a non-root user is must in security sensitive environments. However, these programs sometimes need to publish their service on privileged ports like port 80 – which cannot be used by local users. Systemd offers a simple way to solve this problem.
MongoDB is often installed right from upstream provided repositories. In such cases with recent updates the service might fail to start via systemctl. A workaround requires some SELinux work.
/home/liquidat 