seems to be start-able as a service.

net-nds/kanidmd/kanidmd-1.8.5-r1.ebuild

@@ -799,6 +799,11 @@ BDEPEND="
 
 S="${WORKDIR}/kanidm-${PV}"
 
+pkg_setup() {
+	export KANIDM_BUILD_PROFILE=release_linux
+	rust_pkg_setup
+}
+
 src_prepare() {
 	eapply_user
 	echo "ECARGO_ARGS: ${ECARGO_ARGS}"
@@ -847,6 +852,10 @@ src_install() {
 		systemd_dounit platform/opensuse/kanidmd.service
 
 		newinitd "${FILESDIR}/kanidm.initd" kanidmd
+
+		setcap 'CAP_NET_BIND_SERVICE+ep' /usr/sbin/kanidmd
+		dodir /run/kanidmd
+		chown kanidm /var/run/kanidmd
 	fi
 
 	if use acct; then