···

       
34
       
34
       
 
       
	// Build systemd-run command with security properties

     

       
35
       
35
       
 
       
	// Using service unit (not scope) to get access to network/filesystem isolation

     

       
36
       
36
       
 
       
	systemdArgs := []string{

     

       
37
       
37
       
+
       
		"--wait",           // Wait for service to complete

     

       
37
       
38
       
 
       
		"--unit=" + name,   // Give it a descriptive name

     

       
38
       
39
       
 
       
		"--quiet",          // Suppress systemd output

     

       
39
       
40
       
 
       
		"--collect",        // Automatically clean up after exit