Re: [gentoo-dev] Requirements for UID/GID management

["A. Wilcox" <awilfox@adelielinux.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 28/01/17 13:32, James Le Cuirot wrote:
> On Sat, 28 Jan 2017 12:13:53 -0600 "A. Wilcox"
> <awilfox@adelielinux.org> wrote:
> 
>> Having a file that user.eclass would use to map new users/groups
>> to IDs would be extremely beneficial to me.  I was thinking about
>> diving in to that some time later, after the GLEP 70 work I'm
>> doing, but if someone else wants to take it - please!  That would
>> greatly ease the pain of not only NFS, but swapping data disks
>> around between different / .
>> 
>> Consider, for example, one of my use cases for this:  I have a 
>> LibreSSL / that I use solely for testing ebuilds against it, and
>> my regular / with OpenSSL.  I share /home and /srv between these
>> two, but the apache, nginx, and charybdis users have different
>> UIDs between them.  Therefore I have to chown -R each time I test
>> LibreSSL.
>> 
>> I could use a different /home and /srv, or make two copies, but
>> it's much easier for me to test these apps having my entire
>> normal environment available to me.
> 
> As mentioned in my other post, why are you not using idmapd? It's 
> trivial to set up on top of NFSv4.
> 

I think you have missed the point.  This is not on a network and this
has nothing to do with NFS of any version.

This is two LVM volumes, /dev/ciall/libressl and /dev/ciall/root,
mounting /dev/ciall/home and /dev/ciall/srv where they belong.  The
kernel is started with different root=, or sometimes I just bind mount
and chroot if I want to run both at the same time.

Nothing to do with networking, just two parallel Gentoo installs on the
same machine that can't agree worth a darn on UIDs/GIDs.

I like the pre_pkg_setup idea spouted elsewhere in this thread and will
likely start using this myself until Gentoo figures out how to guarantee
stability with UIDs.

Regards,
- --arw

- -- 
A. Wilcox (awilfox)
Project Lead, Adélie Linux
http://adelielinux.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJYjiOAAAoJEMspy1GSK50UWrAQAIq0fz+oxA2SWCEBNdKKZgRN
gNJOcnEj9lWSiE4bXA4C4diFj38GD5HhTK6awwNjEJ2e3S/+IvJvy97RcUjzpP09
iE+77p3YyZeVxywONJ+BK0gSWc3pJrYzzZWMmHMhIhA5TW78OPKFgP4q+FT8Ruwu
TdYL4/cH6shcELacsgLq+0fBxgT8xkl5LA0OWdW5g2lVFzcnZ7sM/qX7WMlksaVY
o4fPBc10hNwrAW5HsSBOw6tZsf+8CtaBaYVub1DfgWSLxmE70+9pX+4VCObvuc9m
CZ1u3tvcus7xBbpIDxD9M6yC7Jkj250Gr0IAJol2y8JJY5EyCu/iNtUbHT3lgb+F
qRKLbMDp91F9jzHmup04UuJdVkcDaxA4nfb7RWGOnH4U5BmmCdHkxUMtSA2vPNAh
9m7dwn+Yb6OjHKvB/gswbRfT4vV6bn0a07/J72GBgoWvEvGZ/rj9mO5O7gu/k9eQ
zXc3eSWWmi6S3FtDHKNP7U+CrBGOu6DN79GGDO4zzGpl8aWGFm8ol3qW5jtWKdsP
y0K1n2erH1Xfj5CoXzcbm3s7EQxiB3hEHlfv2gYYMrZZuqKgrVXQ5krvNApbsiQo
dVmGOugfIUnVcv/o6rpwtCzNnyGahq6PISkJbRwzh3irA7fsZjYYZITnN6Ba0jIU
EVO3/JgkJDAvyn+ZWQ8O
=aaA7
-----END PGP SIGNATURE-----