Gentoo Archives: gentoo-dev

From: A Schenck <lane_andrew@×××××××.com>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] rfc: allow -1 for ACCT_USER_ID and ACCT_GROUP_ID in ::gentoo
Date: Wed, 01 Dec 2021 16:58:24
Message-Id: DM6PR07MB415662310D2E1A3C06BF69C99D689@DM6PR07MB4156.namprd07.prod.outlook.com
In Reply to: Re: [gentoo-dev] rfc: allow -1 for ACCT_USER_ID and ACCT_GROUP_ID in ::gentoo by William Hubbs
1 On 11/30/21 17:32, William Hubbs wrote:
2 > On Tue, Nov 30, 2021 at 12:59:18PM +0100, Ulrich Mueller wrote:
3 >>>>>>> On Tue, 30 Nov 2021, James Cloos wrote:
4 >>>>>>> "UM" == Ulrich Mueller <ulm@g.o> writes:
5 >> UM> Also, why would one allocate UIDs in the 500..999 range (1000 is fine,
6 >> UM> actually)? Gentoo always had UID_MIN=1000 and SYS_UID_MAX=999.
7 >>
8 >>> why do you thing gentoo is everyone's first or only dist on their
9 >>> network?
10 >>> or even on any given box?
11 >> I was specifically asking about Gentoo infra there.
12 >>
13 >>> forcing existing boxen to change just because a new dist is added
14 >>> is also unacceptable.
15 >>> for me though, it would be enough if there is something i can add to
16 >>> make.conf to ensure that the acct-user and acct-group builds avoid the
17 >>> ranges i already use.
18 >>> that may also work for others.
19 >> UIDs in the range SYS_UID_MIN..SYS_UID_MAX (i.e. 101..999) were always
20 >> used for dynamic allocation of system accounts. GLEP 81 hasn't really
21 >> changed anything there, except that the ebuild will now suggest an ID to
22 >> try first.
23 > This is the part of this that I don't understand. If we aren't enforcing
24 > an ID, why do we care which ID to try first? It seems to be an
25 > unnecessary step since users can pick the IDs they want by putting
26 > settings in make.conf.
27 At risk of sounding pithy, it could maybe be summed up as: 'because
28 "Gentoo is about choice" (but a sensible default doesn't hurt).' As you
29 say "users _can_ pick the IDs they want," but if they don't happen to
30 want to, we've tried to pick defaults (which are even shared by other
31 distributions where possible) so that there's a greater than zero chance
32 that things will "just work" when the time comes for them to
33 interoperate. As a user, despite having initially installed way before
34 this was a thing, it seems nice. The new SBC (rockpro64) we installed
35 last year or so has a much more consistent user setup now than the
36 laptop which is just random.
37 >
38 > William
39 -A

Attachments

File name MIME type
OpenPGP_signature.asc application/pgp-signature