Re: rpm-ostree/bootc uid/gid drift problem

2025-05-01 Thread Colin Walters
On Tue, Apr 29, 2025, at 2:00 PM, Simo Sorce wrote: > Colin, > Seem to me the problem here is clearly that ostree can't support > dynamic uids, First an important thing to understand is that while ostree will continue to be supported for quite a long time, lately we're aiming that the current u

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-29 Thread Simo Sorce
Colin, Seem to me the problem here is clearly that ostree can't support dynamic uids, so it should not try. I see only two solutions: 1. Create a file that assigns permanently UIDs for all the packages you know about that currently assign uid dynamically. This solves the problem entirely for all

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-28 Thread Colin Walters
On Mon, Apr 28, 2025, at 5:33 AM, Lennart Poettering wrote: > This is clearly a bug in ostree if you ask me: /etc/passwd should > under no cicumstances be flushed out entirely: once deployed it must > remain local configuration. There is no special casing for /etc/passwd in ostree. There is onl

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-28 Thread Lennart Poettering
On Mi, 23.04.25 20:17, Zbigniew Jędrzejewski-Szmek (zbys...@in.waw.pl) wrote: > > > To be clear though, I think this is a generic issue affecting > > > *every* image based update system that wants to maintain some > > > persistent state. > > > > No, not at all? I have been dealing with immutable s

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-28 Thread Lennart Poettering
On Mi, 23.04.25 14:33, Zbigniew Jędrzejewski-Szmek (zbys...@in.waw.pl) wrote: > > > > Then we should do what the SUSE people did and move packaged versions > > > > of those things to /usr instead. Or make the system work with drop-in > > > > files, or a number of other things. > > > > > > Please s

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-28 Thread Lennart Poettering
On Mi, 23.04.25 13:27, Zbigniew Jędrzejewski-Szmek (zbys...@in.waw.pl) wrote: > On Tue, Apr 22, 2025 at 03:57:42PM +0200, Lennart Poettering wrote: > > I don't follow? The UID assignments are stored in /etc/passwd, > > i.e. your example config file and the UID assignment are stored at the > > same

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-23 Thread Zbigniew Jędrzejewski-Szmek
On Tue, Apr 22, 2025 at 04:09:17PM +0200, Lennart Poettering wrote: > On Di, 15.04.25 14:27, Colin Walters (walt...@verbum.org) wrote: > > > Thanks for posting this! > > > > On Tue, Apr 15, 2025, at 6:55 AM, Zbigniew Jędrzejewski-Szmek wrote: > > > > > This was a known problem for rpm-ostree syste

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-23 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Apr 23, 2025 at 10:15:20AM -0400, Neal Gompa wrote: > On Wed, Apr 23, 2025 at 10:11 AM Zbigniew Jędrzejewski-Szmek > wrote: > > > > On Wed, Apr 23, 2025 at 09:37:24AM -0400, Neal Gompa wrote: > > > On Wed, Apr 23, 2025 at 9:28 AM Zbigniew Jędrzejewski-Szmek > > > wrote: > > > > > > > > On

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-23 Thread Neal Gompa
On Wed, Apr 23, 2025 at 10:11 AM Zbigniew Jędrzejewski-Szmek wrote: > > On Wed, Apr 23, 2025 at 09:37:24AM -0400, Neal Gompa wrote: > > On Wed, Apr 23, 2025 at 9:28 AM Zbigniew Jędrzejewski-Szmek > > wrote: > > > > > > On Tue, Apr 22, 2025 at 03:57:42PM +0200, Lennart Poettering wrote: > > > > I

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-23 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Apr 23, 2025 at 09:37:24AM -0400, Neal Gompa wrote: > On Wed, Apr 23, 2025 at 9:28 AM Zbigniew Jędrzejewski-Szmek > wrote: > > > > On Tue, Apr 22, 2025 at 03:57:42PM +0200, Lennart Poettering wrote: > > > I don't follow? The UID assignments are stored in /etc/passwd, > > > i.e. your exampl

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-23 Thread Neal Gompa
On Wed, Apr 23, 2025 at 9:28 AM Zbigniew Jędrzejewski-Szmek wrote: > > On Tue, Apr 22, 2025 at 03:57:42PM +0200, Lennart Poettering wrote: > > I don't follow? The UID assignments are stored in /etc/passwd, > > i.e. your example config file and the UID assignment are stored at the > > same place, s

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-23 Thread Zbigniew Jędrzejewski-Szmek
On Tue, Apr 22, 2025 at 03:57:42PM +0200, Lennart Poettering wrote: > I don't follow? The UID assignments are stored in /etc/passwd, > i.e. your example config file and the UID assignment are stored at the > same place, so how can they get out of sync? rpm-ostree and bootc attempt to merge the loc

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-22 Thread Alexander Sosedkin
On Fri, Apr 18, 2025 at 8:25 PM Zbigniew Jędrzejewski-Szmek wrote: > > On Thu, Apr 17, 2025 at 06:52:43PM +0200, Alexander Sosedkin wrote: > > The problem stems entirely from UIDs and GUDs being numbers > > and not strings. I see this as a peculiarity of some of the filesystems, > > you target. Sa

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-22 Thread Lennart Poettering
On Di, 15.04.25 14:27, Colin Walters (walt...@verbum.org) wrote: > Thanks for posting this! > > On Tue, Apr 15, 2025, at 6:55 AM, Zbigniew Jędrzejewski-Szmek wrote: > > > This was a known problem for rpm-ostree systems, and was handled > > ad-hoc when problems were reported, but is becoming a bigg

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-22 Thread Lennart Poettering
On Di, 15.04.25 10:55, Zbigniew Jędrzejewski-Szmek (zbys...@in.waw.pl) wrote: > Hi folks, > > [I'm writing this on Colin's suggestion, to introduce more people to > the discussion and hopefully get some new ideas how to solve the > problem. Apologies for the length.] > > The problem: when packages

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-18 Thread Zbigniew Jędrzejewski-Szmek
On Fri, Apr 18, 2025 at 02:34:33PM -0400, Neal Gompa wrote: > On Fri, Apr 18, 2025 at 2:24 PM Zbigniew Jędrzejewski-Szmek > wrote: > > > > On Thu, Apr 17, 2025 at 06:52:43PM +0200, Alexander Sosedkin wrote: > > > The problem stems entirely from UIDs and GUDs being numbers > > > and not strings. I

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-18 Thread Neal Gompa
On Fri, Apr 18, 2025 at 2:24 PM Zbigniew Jędrzejewski-Szmek wrote: > > On Thu, Apr 17, 2025 at 06:52:43PM +0200, Alexander Sosedkin wrote: > > The problem stems entirely from UIDs and GUDs being numbers > > and not strings. I see this as a peculiarity of some of the filesystems, > > you target. Sa

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-18 Thread Zbigniew Jędrzejewski-Szmek
On Thu, Apr 17, 2025 at 06:52:43PM +0200, Alexander Sosedkin wrote: > The problem stems entirely from UIDs and GUDs being numbers > and not strings. I see this as a peculiarity of some of the filesystems, > you target. Say, tar is a filesystem that does not have this problem. > The specific dynamic

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-17 Thread Alexander Sosedkin
On Tue, Apr 15, 2025 at 12:55 PM Zbigniew Jędrzejewski-Szmek wrote: > [I'm writing this on Colin's suggestion, to introduce more people to > the discussion and hopefully get some new ideas how to solve the > problem. Apologies for the length.] > > The problem: when packages have files owned by a u

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-15 Thread Colin Walters
Hi Andrew, thanks for your reply. On Tue, Apr 15, 2025, at 7:22 PM, Andrew Lutomirski wrote: > So imagine that /etc/opencryptoki was > owned by root (or maybe, in a no-modes-maximalist world it was really > /etc/secret/opencryptoki and /etc/secret and everything under it was > only readable by ro

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-15 Thread Andrew Lutomirski
On Tue, Apr 15, 2025 at 3:55 AM Zbigniew Jędrzejewski-Szmek wrote: > > ** Details of the problem ** > > I know the summary above is dense. Let's go through an example: > > - Package opencryptoki defines group pkcs11. This group uses "dynamic > allocation", i.e. the specific numeric gid is select

Re: rpm-ostree/bootc uid/gid drift problem

2025-04-15 Thread Colin Walters
Thanks for posting this! On Tue, Apr 15, 2025, at 6:55 AM, Zbigniew Jędrzejewski-Szmek wrote: > This was a known problem for rpm-ostree systems, and was handled > ad-hoc when problems were reported, but is becoming a bigger problem > for bootc systems. To be clear though, I think this is a gener