Gentoo Archives: gentoo-dev

From: "A. Wilcox" <awilfox@×××××××××××.org>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Requirements for UID/GID management
Date: Sun, 29 Jan 2017 17:25:46
Message-Id: 588E24D1.8030703@adelielinux.org
In Reply to: Re: [gentoo-dev] Requirements for UID/GID management by Michael Orlitzky
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA256
3
4 On 29/01/17 11:05, Michael Orlitzky wrote:
5 > On 01/29/2017 03:26 AM, Alan McKinnon wrote:
6 >>>
7 >>> Can anyone think of an upgrade path for fixed UIDs? That issue
8 >>> aside, I may have convinced myself that fixed UIDs are better.
9 >>
10 >> The general process I would recommend is that if the ebuild finds
11 >> the user already exists, leave it, it's UID and it's file
12 >> ownerships alone, and keep them as they are. If the user does not
13 >> exist then create it.
14 >
15 > That's what I've got it doing now...
16 >
17 >
18 >> Preferably use a pre-assigned UID/GID so there is some
19 >> consistency with most other Gentoo things out there.
20 >
21 > This is the only point we have left to consider. To recap, there
22 > are three approaches to try:
23 >
24 > 1 Truly fixed IDs. Every user gets the UID it wants, or it doesn't
25 > get created. The UIDs are all determined beforehand.
26 >
27 > 2 Mostly random UIDs, and the few packages that need to specify
28 > one can do so. Usually installation will never fail, but if some
29 > user specifies a particular UID and doesn't get it, we die().
30 >
31 > 3 Mostly fixed UIDs, but with a fallback to random ones if you
32 > don't get the UID you want. Here, everyone specifies their
33 > "preferred" UID, and we try that first. If it doesn't work, you get
34 > the random assignment.
35
36
37 You could easily start with #3, and after some years, move to #1.
38
39 Anyone with a 20 year old Gentoo install (by that time) should expect
40 to have to do very heavy lifting.
41
42 I for one am more than willing to do whatever shell commands necessary
43 to make all my Gentoo installs agree on UIDs and get #1 now, but I
44 realise most people are not.
45
46 - --arw
47
48 - --
49 A. Wilcox (awilfox)
50 Project Lead, Adélie Linux
51 http://adelielinux.org
52 -----BEGIN PGP SIGNATURE-----
53 Version: GnuPG v2
54
55 iQIcBAEBCAAGBQJYjiTOAAoJEMspy1GSK50UCgYP/j7zBRAiL6w7fACER+A+J/3x
56 keXe4OsBzlNsUxqC+BrQ/Y9tCSJnIHRIs6ozQCgEdfAKJfkLqkSmKAY3O3RT+mho
57 VzjUCibftf/UNGOnFf6BqXCeBEjtV1YA7URlYumNyHxdG/AFIICWYFSSTLwzJoR1
58 91wqJmbcUI3LtQXoXodaYC2nbUWvcbO8RyxpDmxZ33L8xj1lAgpuFNcdEs+Rscxp
59 oDK4zJC/K8wUYTUR2YO1Lb3lPF6qgJbMcX0YpQaXIGeYA2PXf4O+LqTXmGNr4O9r
60 DFM3dbPgq2YPuHORACUY5YsmPBjHiaJlgzJo2WrhnIc2D1MPhA430Xlloiua3kF9
61 G7yqkz7mhBtJFrExoQ2MrtXMB5vwDUZ+3qrBzx/cKfxpSzsRck5NZ27eWK0oEpg2
62 fAUFJT7iIwSD3WyLkQbc2HHQ5nnTlnrBHM56YgCIPgz1Y4aNSB7hA+tCfQj4CNZC
63 Y25d9VzBM2KclASiH6ROQLK5EyU0joMtZvTRx89b8SJV+AebLeaWtCsGe41KeF/W
64 iDSnPGXtKRLYZtdebxGCXZwbaUVCRu/cIH2TXMpWDjm0iw3GoFZ6jiLveRCns59U
65 UecZNQph5tPc/HBX2zCTTmH3jNfifSfb525aHVnUSVlyTWa8SQzw2jlnOuAkI33q
66 8MY5++CHplEPGVCvYMrc
67 =99NE
68 -----END PGP SIGNATURE-----

Replies

Subject Author
Re: [gentoo-dev] Requirements for UID/GID management james <garftd@×××××××.net>