Pierre Neidhardt <m...@ambrevar.xyz> writes:

> I've just "guix pull"ed and I get the following:
>
> --8<---------------cut here---------------start------------->8---
>> guix environment --container --ad-hoc coreutils shadow 
> # id
> uid=0(ambrevar) gid=0(users) groups=0(users),65534(overflow)
> # groupadd audio
> groupadd: PAM: Critical error - immediate abort
> # useradd foo
> useradd: PAM: Critical error - immediate abort
> --8<---------------cut here---------------end--------------->8---
>
> Any idea where to go from here?

I suppose /etc/pam.d/ also needs to be in the container.

> Ricardo Wurmus <rek...@elephly.net> writes:
>
>> I agree.  Defaulting to UID 0 is not good.  (“conda” is an example of
>> one application that has very different behaviour when it thinks it is
>> running as root.)
>
> What about defaulting to 1000?  It's rather common, so I guess that
> would be anonymous enough and "just work".

Would it make sense to map the current user’s UID into the container
instead of using a fixed UID?

-- 
Ricardo


Reply via email to