-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 27/01/17 20:37, Patrick McLean wrote: > I don't think we need to have stable UIDs/GIDs in the "normal" case > of standalone users with a single Gentoo system at home. The people > who need predictable UIDs/GIDs are the "enterprise" users or the > home users who use things such as NFS. I work for a company that > uses Gentoo, we have a bunch of workarounds to make sure that UIDs > and GIDs are stable. To make something to solve our problem (and I > suspect everyone else who cares about this), it would be sufficient > to have a mechanism to override the default random assignment with > a fixed UID/GID. Possibly some file in /etc/portage or in the > profile (or both) that allows one to configure what UID/GID a user > will get when the user is being created. One advantage of this is > that user.eclass could be modified to support it, so we don't have > to wait for a new EAPI before taking advantage of it. >
Having a file that user.eclass would use to map new users/groups to IDs would be extremely beneficial to me. I was thinking about diving in to that some time later, after the GLEP 70 work I'm doing, but if someone else wants to take it - please! That would greatly ease the pain of not only NFS, but swapping data disks around between different / . Consider, for example, one of my use cases for this: I have a LibreSSL / that I use solely for testing ebuilds against it, and my regular / with OpenSSL. I share /home and /srv between these two, but the apache, nginx, and charybdis users have different UIDs between them. Therefore I have to chown -R each time I test LibreSSL. I could use a different /home and /srv, or make two copies, but it's much easier for me to test these apps having my entire normal environment available to me. Best, - --arw - -- A. Wilcox (awilfox) Project Lead, Adélie Linux http://adelielinux.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJYjN9aAAoJEMspy1GSK50UD3YQAI/ImKKEoTdEu9B3woyDsbcz 4QElt5OsaiOFcT9f30/rI/8G5NQ9JYbh/XvvS7JlPllhCu+xV+BQhGznH7C+w7sf 0m/9HJbJLLDXcpP1gB9lUTn1JhKN6Vp19UhTi5upXIhTK5yTeUAxG/VhpucfMnml QsC7DOg584nL47/w2jc/IWqZLIJ/SVbWcYBpjbfelCRHetuR/cXLdpe4EhqnwcVx EhVh1zUJYDMDwFK5OYCrwHFvp2PUy7d1qiWOJZ5dGvw+SuG2/Xd2hcwgwFf6X3EK 8cxWPc3xrbmmtxKTatkKB/pOGn1rj/bm4JD0XxjzPJUWJ28eZ06LDZ2lszm7xse5 KUg0cgT4AwER0K1G7bqFfntdDNii6qjs/B5oBY9Jr/SC0YGDvcbh2bMYKDRTDRqN Qu9zzk5MndkoIOQUFt5ccRYoXftDBKofmqWYhqjxo/LUcnvpF9w1nacsGIkkFWE6 64Y80yIr1A++WQGasd2U1SAbDFFHaXdv5YSENRTGo19I/QWVO1L70M3KRh7YIgz/ Nx7aWH3ir9BGFqi/plqSfbr30m85EA1LMnc8iPfe/HcnyOZgrZkdNzmENoeudqGU SAe5AeAimoYbmJfJAv4ou4aOnKtNi4tZQVTkYi4Y9SvkRLHU7lquPDre92f9WWOx jMHKVwcPi3BGtladWZM1 =Ufwn -----END PGP SIGNATURE-----
