From: dongshengyuan <545258830@qq.com>
Date: Mon, 13 Jul 2026 05:56:52 +0000 (+0800)
Subject: run: reject --ignore-failure in scope mode
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=dd6c127d6bb55c3280c1344c7d8222e2aad8511f;p=thirdparty%2Fsystemd.git

run: reject --ignore-failure in scope mode

Reproducer:
  sudo systemd-run --scope --ignore-failure /bin/false
  echo $?

Before, the option was accepted but had no effect because scope mode
executes the command locally after creating the scope. The flag is only
encoded into service ExecStart properties, so accept it only where it can
be applied.

Follow-up for 1072d9473123ed174e033704fc5222216b655c9e
---

diff --git a/man/systemd-run.xml b/man/systemd-run.xml
index 386702ac401..9afe4ab4468 100644
--- a/man/systemd-run.xml
+++ b/man/systemd-run.xml
@@ -575,7 +575,7 @@
         <listitem><para>By default, if the specified command fails the invoked unit will be marked failed
         (though possibly still unloaded, see <option>--collect=</option>, above), and this is reported in the
         logs. If this switch is specified this is suppressed and any non-success exit status/code of the
-        command is treated as success.</para>
+        command is treated as success. This option is not supported in <option>--scope</option> mode.</para>
 
         <xi:include href="version-info.xml" xpointer="v256"/></listitem>
       </varlistentry>
diff --git a/src/run/run.c b/src/run/run.c
index ac6d3c01961..69449ab2ffc 100644
--- a/src/run/run.c
+++ b/src/run/run.c
@@ -697,9 +697,9 @@ static int parse_argv(int argc, char *argv[]) {
                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
                                        "Scope execution is not supported on remote systems.");
 
-        if (arg_scope && (arg_remain_after_exit || arg_service_type))
+        if (arg_scope && (arg_remain_after_exit || arg_service_type || arg_ignore_failure))
                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
-                                       "--remain-after-exit and --service-type= are not supported in --scope mode.");
+                                       "--remain-after-exit, --service-type= and --ignore-failure are not supported in --scope mode.");
 
         if (arg_scope && arg_no_block)
                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
diff --git a/test/units/TEST-74-AUX-UTILS.run.sh b/test/units/TEST-74-AUX-UTILS.run.sh
index ec73a0bd1c4..9db1a81018a 100755
--- a/test/units/TEST-74-AUX-UTILS.run.sh
+++ b/test/units/TEST-74-AUX-UTILS.run.sh
@@ -115,6 +115,7 @@ systemd-run --scope \
             --property=RuntimeMaxSec=10 \
             --property=RuntimeMaxSec=infinity \
             true
+(! systemd-run --scope --ignore-failure false)
 
 : "Transient scope (user daemon)"
 # FIXME: https://github.com/systemd/systemd/issues/27883