systemd Unit Analyzer
What this doesn't do
This never installs, links, starts, or otherwise executes anything against your real
system — it only parses text. It can't verify that a file referenced by
EnvironmentFile= or a binary referenced by ExecStart= actually
exists on your machine, since it has no access to your filesystem; it says so explicitly
rather than guessing. Dependency-cycle detection is limited to what's determinable from a
single pasted file (a unit listing itself, or directly contradictory After=/
Before= entries) — a cycle spanning multiple unit files can't be detected here.
The hardening summary is a starting-point checklist, not a guarantee of security — see
systemd.exec(5)
for the full, authoritative sandboxing reference.