(In reply to Luis Chamberlain from comment #31) > Also, is there a work around I can use in the meantime, to move on with life > in the meantime with this system? Sorry for the late reply. At least there's no simple workaround with systemd. As written in comment #25, the RLIMIT_NOFILE is directly inherited from PID1 when a service is being created and before initgroups(3) is called. Only after the service specific rlimits are initialized.