[Unit]
Description=Dynamic user for /run/cockpit/wsinstance/ sockets
Documentation=man:cockpit-ws(8)
# avoid dependency loop with basic.target/sockets.target shutdown
DefaultDependencies=no
BindsTo=cockpit.service

[Service]
DynamicUser=yes
User=cockpit-wsinstance-socket
Group=cockpit-wsinstance-socket
Type=oneshot
ExecStart=/bin/true
RemainAfterExit=yes