packages/osiris: use new service functions, set /var/lib/osiris perms