Re: strawman proposal: homed directories for users

2024-10-09 Thread Owen Taylor
On Wed, Oct 9, 2024 at 2:19 PM Kilian Hanich via devel < devel@lists.fedoraproject.org> wrote: > Am 09.10.24 um 17:12 schrieb Simo Sorce: > >> Hence I am very curious where you think the security issues are? > > Sorry, I did not mean in any way to imply there are open security issue > > with syste

Re: strawman proposal: homed directories for users

2024-10-09 Thread Kilian Hanich via devel
Am 09.10.24 um 17:12 schrieb Simo Sorce: Hence I am very curious where you think the security issues are? Sorry, I did not mean in any way to imply there are open security issue with systemd-homed, I meant only that we need to analyze the security assumptions in the context of making this a defa

Re: RFC should authselect require nss_altfiles

2024-10-09 Thread Colin Walters
On Wed, Oct 9, 2024 at 6:56 AM Pavel Březina wrote: > Hi Fedora, > nss-altfiles is not currently part of the default installation and can > be optionally added to nsswitch.conf via authselect's with-altfiles. > > This however breaks ostree composes since it uses and requires alltfiles > to provid

Re: strawman proposal: homed directories for users

2024-10-09 Thread Simo Sorce
On Tue, 2024-10-08 at 17:57 +0200, Lennart Poettering wrote: > On Mo, 07.10.24 12:59, Simo Sorce (s...@redhat.com) wrote: > > > > The homed approach would make other things possible too. For example, > > > sharing of /home in dual-boot scenarios. Right now a manual setup > > > needs to be done, an

Re: RFC should authselect require nss_altfiles

2024-10-09 Thread Lennart Poettering
On Mi, 09.10.24 12:56, Pavel Březina (pbrez...@redhat.com) wrote: > Hi Fedora, > nss-altfiles is not currently part of the default installation and can be > optionally added to nsswitch.conf via authselect's with-altfiles. > > This however breaks ostree composes since it uses and requires alltfile

Fedora 41 compose report: 20241009.n.0 changes

2024-10-09 Thread Fedora Branched Report
OLD: Fedora-41-20241008.n.0 NEW: Fedora-41-20241009.n.0 = SUMMARY = Added images:1 Dropped images: 2 Added packages: 5 Dropped packages:1 Upgraded packages: 76 Downgraded packages: 0 Size of added packages: 1.26 MiB Size of dropped packages:57.39 KiB Size

Re: f41 dnf builddeps fails to parse systemd.spec

2024-10-09 Thread Dominik 'Rathann' Mierzejewski
On Wednesday, 09 October 2024 at 00:23, Barry wrote: > > On 8 Oct 2024, at 21:08, Miroslav Suchý wrote: > > > > Dne 08. 10. 24 v 7:09 odp. Barry Scott napsal(a): > >> Now I have systemd .src.rpm installed next I needed the build deps > >> so that I can do a rpmbuild. > > > > Are you sure you wa

Fedora rawhide compose report: 20241009.n.0 changes

2024-10-09 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20241008.n.1 NEW: Fedora-Rawhide-20241009.n.0 = SUMMARY = Added images:2 Dropped images: 0 Added packages: 1 Dropped packages:1 Upgraded packages: 35 Downgraded packages: 0 Size of added packages: 25.09 KiB Size of dropped packages

RFC should authselect require nss_altfiles

2024-10-09 Thread Pavel Březina
Hi Fedora, nss-altfiles is not currently part of the default installation and can be optionally added to nsswitch.conf via authselect's with-altfiles. This however breaks ostree composes since it uses and requires alltfiles to provide system users. This is handled in authselect spec file that

Re: f41 dnf builddeps fails to parse systemd.spec

2024-10-09 Thread Barry Scott
> On 9 Oct 2024, at 11:09, Zbigniew Jędrzejewski-Szmek > wrote: > > It'd be worth filing a bug for this. There were some bugs about > dnf5 not reporting things, but this one seems egregious. > > Zbyszek Done. Raised https://bugzilla.redhat.com/show_bug.cgi?id=2317531 Barry --

Re: f41 dnf builddeps fails to parse systemd.spec

2024-10-09 Thread Zbigniew Jędrzejewski-Szmek
On Tue, Oct 08, 2024 at 09:39:49PM -0700, Samuel Sieb wrote: > The problem is that you're using "sudo" for this. dnf5 doesn't print the > reason for the failure, which is unfortunate. If you do it with "dnf4", you > do get the reason. > > $ sudo dnf4 builddep SPECS/systemd.spec > RPM: error: Una

Re: strawman proposal: homed directories for users

2024-10-09 Thread Barry Scott
> On 9 Oct 2024, at 10:04, Zbigniew Jędrzejewski-Szmek > wrote: > > On Tue, Oct 08, 2024 at 06:14:29PM +0100, Barry Scott wrote: >>> On 4 Oct 2024, at 16:05, Zbigniew Jędrzejewski-Szmek >>> wrote: >>> >>> Hi folks, >>> >>> I was recently doing a bunch of test reinstalls of Fedora [1], >>>

Re: f41 dnf builddeps fails to parse systemd.spec

2024-10-09 Thread Barry Scott
> On 9 Oct 2024, at 05:39, Samuel Sieb wrote: > > The problem is that you're using "sudo" for this. dnf5 doesn't print the > reason for the failure, which is unfortunate. If you do it with "dnf4", you > do get the reason. Raised https://bugzilla.redhat.com/show_bug.cgi?id=2317531 > > $ s

Re: strawman proposal: homed directories for users

2024-10-09 Thread Zbigniew Jędrzejewski-Szmek
On Tue, Oct 08, 2024 at 06:14:29PM +0100, Barry Scott wrote: > > On 4 Oct 2024, at 16:05, Zbigniew Jędrzejewski-Szmek > > wrote: > > > > Hi folks, > > > > I was recently doing a bunch of test reinstalls of Fedora [1], > > looking to see if it's complicated to retain the user directories > > dur

Re: strawman proposal: homed directories for users

2024-10-09 Thread Lennart Poettering
On Di, 08.10.24 22:21, Chris Murphy (li...@colorremedies.com) wrote: > >> And at least on my setup with many read-only snapshots in > >> ~/, permissions changes wouldn't be permitted, even by the root > >> user. > > > > Not sure I grok what you are trying to say here? > > Read-only snapshot conten

Re: strawman proposal: homed directories for users

2024-10-09 Thread Lennart Poettering
On Mi, 09.10.24 09:59, Lennart Poettering (mzerq...@0pointer.de) wrote: > That said, for compat with traditional subuid/subgid as per the table > on https://systemd.io/UIDS-GIDS the UID/GID range 524288…1879048191 is > mapped 1:1 on homed homes, thus if you use those things work as > before. Just

Re: strawman proposal: homed directories for users

2024-10-09 Thread Lennart Poettering
On Di, 08.10.24 11:42, Chris Adams (li...@cmadams.net) wrote: > Once upon a time, Lennart Poettering said: > > Oh, that hasn't been the case for a long time anymore. Nowadays files > > on disk are owned by the "nobody" user always, and idmapped mounts are > > used to map them transiently to the U

Re: strawman proposal: homed directories for users

2024-10-09 Thread Lennart Poettering
On Di, 08.10.24 12:46, Stephen Gallagher (sgall...@redhat.com) wrote: > I suspect you're talking past one another here; in practice, IPA has a > random set of ID ranges that (IIRC) essentially owns the ID space of > 10,000 - 2,010,000. (It's possible for the installer to set an > arbitrary range o