-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 29/01/17 11:05, Michael Orlitzky wrote: > On 01/29/2017 03:26 AM, Alan McKinnon wrote: >>> >>> Can anyone think of an upgrade path for fixed UIDs? That issue >>> aside, I may have convinced myself that fixed UIDs are better. >> >> The general process I would recommend is that if the ebuild finds >> the user already exists, leave it, it's UID and it's file >> ownerships alone, and keep them as they are. If the user does not >> exist then create it. > > That's what I've got it doing now... > > >> Preferably use a pre-assigned UID/GID so there is some >> consistency with most other Gentoo things out there. > > This is the only point we have left to consider. To recap, there > are three approaches to try: > > 1 Truly fixed IDs. Every user gets the UID it wants, or it doesn't > get created. The UIDs are all determined beforehand. > > 2 Mostly random UIDs, and the few packages that need to specify > one can do so. Usually installation will never fail, but if some > user specifies a particular UID and doesn't get it, we die(). > > 3 Mostly fixed UIDs, but with a fallback to random ones if you > don't get the UID you want. Here, everyone specifies their > "preferred" UID, and we try that first. If it doesn't work, you get > the random assignment.
You could easily start with #3, and after some years, move to #1. Anyone with a 20 year old Gentoo install (by that time) should expect to have to do very heavy lifting. I for one am more than willing to do whatever shell commands necessary to make all my Gentoo installs agree on UIDs and get #1 now, but I realise most people are not. - --arw - -- A. Wilcox (awilfox) Project Lead, Adélie Linux http://adelielinux.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJYjiTOAAoJEMspy1GSK50UCgYP/j7zBRAiL6w7fACER+A+J/3x keXe4OsBzlNsUxqC+BrQ/Y9tCSJnIHRIs6ozQCgEdfAKJfkLqkSmKAY3O3RT+mho VzjUCibftf/UNGOnFf6BqXCeBEjtV1YA7URlYumNyHxdG/AFIICWYFSSTLwzJoR1 91wqJmbcUI3LtQXoXodaYC2nbUWvcbO8RyxpDmxZ33L8xj1lAgpuFNcdEs+Rscxp oDK4zJC/K8wUYTUR2YO1Lb3lPF6qgJbMcX0YpQaXIGeYA2PXf4O+LqTXmGNr4O9r DFM3dbPgq2YPuHORACUY5YsmPBjHiaJlgzJo2WrhnIc2D1MPhA430Xlloiua3kF9 G7yqkz7mhBtJFrExoQ2MrtXMB5vwDUZ+3qrBzx/cKfxpSzsRck5NZ27eWK0oEpg2 fAUFJT7iIwSD3WyLkQbc2HHQ5nnTlnrBHM56YgCIPgz1Y4aNSB7hA+tCfQj4CNZC Y25d9VzBM2KclASiH6ROQLK5EyU0joMtZvTRx89b8SJV+AebLeaWtCsGe41KeF/W iDSnPGXtKRLYZtdebxGCXZwbaUVCRu/cIH2TXMpWDjm0iw3GoFZ6jiLveRCns59U UecZNQph5tPc/HBX2zCTTmH3jNfifSfb525aHVnUSVlyTWa8SQzw2jlnOuAkI33q 8MY5++CHplEPGVCvYMrc =99NE -----END PGP SIGNATURE-----
