Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SPEC: use '/run/sssd' as a home dir for 'sssd' user #7618

Closed
wants to merge 1 commit into from
Closed

SPEC: use '/run/sssd' as a home dir for 'sssd' user #7618

wants to merge 1 commit into from

Conversation

alexey-tikhonov
Copy link
Member

even if 'sssd.sysusers' aren't used

Practically this is only important for C9S, since C10S and modern Fedora versions do use 'sssd.sysusers'

@alexey-tikhonov alexey-tikhonov added the no-backport This should go to target branch only. label Sep 24, 2024
@alexey-tikhonov alexey-tikhonov force-pushed the sssd-homedir branch 3 times, most recently from fe5fe24 to 0cb678d Compare September 24, 2024 10:53
@alexey-tikhonov alexey-tikhonov marked this pull request as ready for review September 24, 2024 12:28
@alexey-tikhonov
SPEC: use '/run/sssd' as a home dir for 'sssd' user
57e796b 
even if 'sssd.sysusers' aren't used.
Practically this is only important for C9S, since C10S and
modern Fedora versions do use 'sssd.sysusers'

Also use `usermod` to update home dir in case user already exists.
@alexey-tikhonov
Copy link
Member Author

Moved usermod out of %if %{use_sysusers} to handle case where user already exists (for example, RHEL9->RHEL10 in-place upgrade)

@alexey-tikhonov
Copy link
Member Author

alexey-tikhonov commented Sep 27, 2024 •
edited
Loading 

# rpm -q sssd-common
sssd-common-2.9.5-4.el9.x86_64

# getent passwd sssd
sssd:x:998:996:User for sssd:/:/sbin/nologin

Upgraded:
  libsss_certmap-9.pr7618-05408.el9.x86_64           libsss_idmap-9.pr7618-05408.el9.x86_64             libsss_nss_idmap-9.pr7618-05408.el9.x86_64          
  libsss_sudo-9.pr7618-05408.el9.x86_64              sssd-client-9.pr7618-05408.el9.x86_64              sssd-common-9.pr7618-05408.el9.x86_64               
  sssd-kcm-9.pr7618-05408.el9.x86_64                 sssd-nfs-idmap-9.pr7618-05408.el9.x86_64          

# getent passwd sssd
sssd:x:998:996:User for sssd:/run/sssd:/sbin/nologin

# dnf reinstall "sssd*"
...
  Reinstalling     : sssd-nfs-idmap-9.pr7618-05408.el9.x86_64                                                                                            1/10 
  Reinstalling     : sssd-client-9.pr7618-05408.el9.x86_64                                                                                               2/10 
  Running scriptlet: sssd-client-9.pr7618-05408.el9.x86_64                                                                                               2/10 
  Running scriptlet: sssd-common-9.pr7618-05408.el9.x86_64                                                                                               3/10 
  Reinstalling     : sssd-common-9.pr7618-05408.el9.x86_64                                                                                               3/10 
  Running scriptlet: sssd-common-9.pr7618-05408.el9.x86_64                                                                                               3/10 
  Reinstalling     : sssd-krb5-common-9.pr7618-05408.el9.x86_64                                                                                          4/10 
  Reinstalling     : sssd-kcm-9.pr7618-05408.el9.x86_64                                                                                                  5/10 
  Running scriptlet: sssd-kcm-9.pr7618-05408.el9.x86_64                                                                                                  5/10 
  Running scriptlet: sssd-kcm-9.pr7618-05408.el9.x86_64                                                                                                  6/10 
  Cleanup          : sssd-kcm-9.pr7618-05408.el9.x86_64                                                                                                  6/10 
  Running scriptlet: sssd-kcm-9.pr7618-05408.el9.x86_64                                                                                                  6/10 
  Cleanup          : sssd-krb5-common-9.pr7618-05408.el9.x86_64                                                                                          7/10 
  Running scriptlet: sssd-common-9.pr7618-05408.el9.x86_64                                                                                               8/10 
  Cleanup          : sssd-common-9.pr7618-05408.el9.x86_64                                                                                               8/10 
  Running scriptlet: sssd-common-9.pr7618-05408.el9.x86_64                                                                                               8/10 
  Cleanup          : sssd-nfs-idmap-9.pr7618-05408.el9.x86_64                                                                                            9/10 
  Running scriptlet: sssd-client-9.pr7618-05408.el9.x86_64                                                                                              10/10 
  Cleanup          : sssd-client-9.pr7618-05408.el9.x86_64                                                                                              10/10 
  Running scriptlet: sssd-common-9.pr7618-05408.el9.x86_64                                                                                              10/10 
  Running scriptlet: sssd-client-9.pr7618-05408.el9.x86_64                                                                                              10/10 
...
# getent passwd sssd
sssd:x:998:996:User for sssd:/run/sssd:/sbin/nologin

sumit-bose
sumit-bose approved these changes Sep 27, 2024
View reviewed changes
Copy link
Contributor

@sumit-bose sumit-bose left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi,

thank you for the fix, ACK.

bye,
Sumit

@alexey-tikhonov
Copy link
Member Author

Pushed PR: #7618

  • master
    • 10bf7ab - SPEC: use '/run/sssd' as a home dir for 'sssd' user

@alexey-tikhonov
Copy link
Member Author

Also opened https://gitlab.com/fedora/bootc/base-images/-/merge_requests/57

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@pbrezina pbrezina pbrezina approved these changes

@sumit-bose sumit-bose sumit-bose approved these changes

Assignees

@sumit-bose sumit-bose

@pbrezina pbrezina

Labels
no-backport This should go to target branch only. Pushed
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@alexey-tikhonov @sumit-bose @pbrezina