Re: A corner case of broken reproducibility

2022-06-02 Thread Maxime Devos
Ludovic Courtès schreef op do 02-06-2022 om 16:13 [+0200]: > I’m not sure what the conclusion of those bug reports were, but (gnu > build accounts) doesn’t reuse UIDs: you can see that in > ‘user+group-databases’, which reads the initial /etc/{passwd,group}, and > passes them to ‘allocate-passwd’ a

Re: A corner case of broken reproducibility

2022-06-02 Thread Ludovic Courtès
Hi, Maxime Devos skribis: >> (gnu build accounts) is stateful in that it makes sure UIDs aren’t >> reused.  (This is roughly the same algorithm as used by Shadow.) > > It doesn't? AFAICT it only takes /etc/passwd and /etc/groups in > account and there was some bug report reusing uids in system

Re: A corner case of broken reproducibility

2022-06-02 Thread Ludovic Courtès
Maxime Devos skribis: > Ludovic Courtès schreef op wo 01-06-2022 om 18:38 [+0200]: >> There’s a talk by Lennart Poettering where he explains that, contrary to >> what one might think, “chown -R $HOME” turns out to be fast enough that >> systemd-homed can do that unconditionally (off the of my hea

Re: A corner case of broken reproducibility

2022-06-01 Thread Maxime Devos
raingloom schreef op wo 01-06-2022 om 22:41 [+0200]: > Could we instead check for existing homes and set uids in > /etc/passwd based on that instead? That's practically O(1), but is a > bit more involved. For this to work, the home directory may not be changed. As Ludo wrote (albeit about user na

Re: A corner case of broken reproducibility

2022-06-01 Thread raingloom
On Wed, 01 Jun 2022 22:09:11 +0200 Maxime Devos wrote: > Ludovic Courtès schreef op wo 01-06-2022 om 18:38 [+0200]: > > There’s a talk by Lennart Poettering where he explains that, > > contrary to what one might think, “chown -R $HOME” turns out to be > > fast enough that systemd-homed can do tha

Re: A corner case of broken reproducibility

2022-06-01 Thread Maxime Devos
Ludovic Courtès schreef op wo 01-06-2022 om 18:38 [+0200]: > There’s a talk by Lennart Poettering where he explains that, contrary to > what one might think, “chown -R $HOME” turns out to be fast enough that > systemd-homed can do that unconditionally (off the of my head). Interesting. Taking "fin

Re: A corner case of broken reproducibility

2022-06-01 Thread Maxime Devos
Ludovic Courtès schreef op wo 01-06-2022 om 18:38 [+0200]: > Things that seem missing here to me: > >    * a mechanism for remembering that an uid is still in use even > though > the user has been removed (previously mentioned solutions: keep > the > uid in /etc/passwd even though it is

Re: A corner case of broken reproducibility

2022-06-01 Thread Ludovic Courtès
Maxime Devos skribis: > I don't think the problem is that the uid of /home/... was wrong, > rather I think the problem is that Guix has forgotten the uid and hence > invents a new one to put in /etc/passwd instead of keeping the old one. > > A pitfall (noticed in the context of system accounts):

Re: A corner case of broken reproducibility

2022-05-30 Thread Maxime Devos
Ludovic Courtès schreef op ma 30-05-2022 om 17:58 [+0200]: > Perhaps it should forcefully “chown -R” home directories at boot time, > so they have the right UID?  This has been discussed a few times, I haven't seen the "chown -R" suggestion yet in the context of homes (only for system accounts, an

Re: A corner case of broken reproducibility

2022-05-30 Thread Ludovic Courtès
Hi, Felix Lechner skribis: > On Tue, May 24, 2022 at 11:42 PM Blake Shaw wrote: >> >> I changed my user name in my config without adding a new user > > I did that once in a new installation. In the second generation of my > configuration I changed the example user 'bob' to my own username. It >

Re: A corner case of broken reproducibility

2022-05-25 Thread Felix Lechner
Hi Blake, On Tue, May 24, 2022 at 11:42 PM Blake Shaw wrote: > > I changed my user name in my config without adding a new user I did that once in a new installation. In the second generation of my configuration I changed the example user 'bob' to my own username. It did not work well. Due to pr

A corner case of broken reproducibility

2022-05-24 Thread Blake Shaw
Hiya Guix, I imagine many folks are aware of this outcome, but from a quick search of the archive I didnt find a discussion. I decided to create a new user for building the lighter profile to deploy in Singapore. Not knowing beyond the surface of how user profiles operate at the Linux level, I ch