Gentoo Archives: gentoo-dev

From: Andrew Savchenko <bircoph@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [PATCH v3] glep-0081: User and group management via dedicated packages
Date: Fri, 21 Jun 2019 12:03:05
Message-Id: 20190621150233.c159ee29fedb595156bbd192@gentoo.org
In Reply to: Re: [gentoo-dev] [PATCH v3] glep-0081: User and group management via dedicated packages by David Seifert
1 On Fri, 21 Jun 2019 09:18:23 +0200 David Seifert wrote:
2 > On Fri, 2019-06-21 at 08:59 +0300, Andrew Savchenko wrote:
3 > > On Thu, 20 Jun 2019 16:32:56 +0200 Michał Górny wrote:
4 > > > On Thu, 2019-06-20 at 09:53 -0400, Brian Evans wrote:
5 > > > > On 6/9/2019 7:39 AM, Michał Górny wrote:
6 > > > > > +Tracking of user/group usage is done through dependencies. As
7 > > > > > long
8 > > > > > +as any installed package depends on a specific user/group
9 > > > > > package,
10 > > > > > +the respective user/group is assumed to be used. If no
11 > > > > > package
12 > > > > > +requiring the specific user/group is left, the package manager
13 > > > > > +automatically prunes the package clearly indicating it is no
14 > > > > > longer
15 > > > > > +used.
16 > > > >
17 > > > > You cannot know when a name is "no longer used". An
18 > > > > administrator could
19 > > > > have adopted a username for other purposes.
20 > > >
21 > > > That's why we don't remove the actual user/group. However, this is
22 > > > a valuable information to the administrator that no package is
23 > > > using
24 > > > the user/group in question.
25 > >
26 > > So how do you propose to clean them up? Or let user systems trash
27 > > with unused uids/gids? The GLEP 81 only mensions some possible
28 > > tooling for cleanup. Is there an implementation available? I don't
29 > > see it within proposed patch sets.
30 > >
31 > > This GLEP should not be accepted unless all necessary tools are
32 > > available including a cleanup tool.
33 > >
34 > > Best regards,
35 > > Andrew Savchenko
36 >
37 > Strongly disagree:
38 >
39 > 1) User systems are already getting trashed. And apparently it's not a
40 > critical thing that prevents users from using Gentoo in practice.
41 > 2) A cleanup tool at best will only tell you which files you need to
42 > check, randomly deleting files with orphaned uids/gids is not a good
43 > idea.
44
45 What will happen when some acct-*/* package will be unmerged? Will
46 uid/gid record and/or its files be deteleted?
47
48 > 3) This proposal strictly increases the quality of Gentoo. Don't let
49 > perfect be the enemy of the good. The fact that the problem isn't
50 > solved to 100% doesn't mean that a solution that gets us there 85%
51 > should be rejected.
52 >
53 > Strongly vote +1 to merge this now.
54 >
55 >
56
57
58 Best regards,
59 Andrew Savchenko

Replies