Hi Maxim, Maxim Cournoyer <maxim.courno...@gmail.com> skribis:
> Ricardo Wurmus <rek...@elephly.net> writes: > >> Hi Maxim, >> >>> Ludovic Courtès <ludovic.cour...@inria.fr> writes: >>> >>>> ‘guix pack -f docker’ currently creates an image without >>>> /etc/{passwd,group,shadow}. >>>> >>>> It’s OK most of the time, but again it looks like a gratuitous annoyance >>>> for those cases where having them around matters (that’s also the reason >>>> why guix-daemon creates them.) >>> >>> Would that include the files required for PAM authentication to work >>> correctly? I remember struggling with this use case: using the Docker >>> image with CQFD wrapper, which must be able to create a user and >>> sudo'ing (or 'su') to it in the docker container. >> >> I wonder if at this point it wouldn’t be better to build a whole system >> container. Isn’t that outside the scope of “guix pack” and rather a >> task for “guix system”? I think so. > Probably! But then one has to wonder if adding some base files to `guix > pack' is not one of those slippery slopes where users come back > expecting more stuff to be there? > > What use case(s) exactly depend on the presence of the > /etc/{passwd,group,shadow} files? Generally, absent these files, getpw(3) and co. won’t give useful results, and some applications will behave poorly (e.g., the PS1 prompt in Bash can’t show the user name; ‘id’ fails). Most of the time it’s just a minor inconvenience. Ludo’.