Add systemd 

* add systemd service file
* prefix RUN_AS and CHROOT