[gentoo-dev] [RFC] Reserve slurm user and group uid/gid 500/500

[gentoo-dev] [RFC] Reserve slurm user and group uid/gid 500/500

[Alexey 'Alexxy' Shvetsov]

[-- Attachment #1.1: Type: text/plain, Size: 114 bytes --]

Hi!

I'd like to reserve slurm user and group for sys-cluster/slurm. I plan to use 
old uid/gid for it (500/500)


[-- Attachment #1.2: 0001-acct-group-slurm-Add-slurm-group.patch --]
[-- Type: text/x-patch, Size: 1585 bytes --]

From f8545efd0d615a44083f9a416e6eb195c627ebaf Mon Sep 17 00:00:00 2001
From: Alexey Shvetsov <alexxy@gentoo.org>
Date: Fri, 23 Aug 2019 22:16:49 +0300
Subject: [PATCH 1/2] acct-group/slurm: Add slurm group

Package-Manager: Portage-2.3.72, Repoman-2.3.17
RepoMan-Options: --force
Signed-off-by: Alexey Shvetsov <alexxy@gentoo.org>
---
 acct-group/slurm/metadata.xml   | 12 ++++++++++++
 acct-group/slurm/slurm-0.ebuild |  9 +++++++++
 2 files changed, 21 insertions(+)
 create mode 100644 acct-group/slurm/metadata.xml
 create mode 100644 acct-group/slurm/slurm-0.ebuild

diff --git a/acct-group/slurm/metadata.xml b/acct-group/slurm/metadata.xml
new file mode 100644
index 000000000000..afbbd16e7d0d
--- /dev/null
+++ b/acct-group/slurm/metadata.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<maintainer type="person">
+		<email>alexxy@gentoo.org</email>
+		<name>Alexey Shvetsov</name>
+	</maintainer>
+	<maintainer type="project">
+		<email>cluster@gentoo.org</email>
+		<name>Gentoo Cluster Project</name>
+	</maintainer>
+</pkgmetadata>
diff --git a/acct-group/slurm/slurm-0.ebuild b/acct-group/slurm/slurm-0.ebuild
new file mode 100644
index 000000000000..685064b8a4fe
--- /dev/null
+++ b/acct-group/slurm/slurm-0.ebuild
@@ -0,0 +1,9 @@
+# Copyright 2019 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+inherit acct-group
+
+DESCRIPTION="A group for the slurm - Highly Scalable Resource Manager"
+ACCT_GROUP_ID=500
-- 
2.23.0


[-- Attachment #1.3: 0002-acct-user-slurm-Add-slurm-user.patch --]
[-- Type: text/x-patch, Size: 1682 bytes --]

From b821fcb711b3ebb7f3b01cde30a6c142ec518d7d Mon Sep 17 00:00:00 2001
From: Alexey Shvetsov <alexxy@gentoo.org>
Date: Fri, 23 Aug 2019 22:22:35 +0300
Subject: [PATCH 2/2] acct-user/slurm: Add slurm user

Package-Manager: Portage-2.3.72, Repoman-2.3.17
RepoMan-Options: --force
Signed-off-by: Alexey Shvetsov <alexxy@gentoo.org>
---
 acct-user/slurm/metadata.xml   | 12 ++++++++++++
 acct-user/slurm/slurm-0.ebuild | 14 ++++++++++++++
 2 files changed, 26 insertions(+)
 create mode 100644 acct-user/slurm/metadata.xml
 create mode 100644 acct-user/slurm/slurm-0.ebuild

diff --git a/acct-user/slurm/metadata.xml b/acct-user/slurm/metadata.xml
new file mode 100644
index 000000000000..afbbd16e7d0d
--- /dev/null
+++ b/acct-user/slurm/metadata.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<maintainer type="person">
+		<email>alexxy@gentoo.org</email>
+		<name>Alexey Shvetsov</name>
+	</maintainer>
+	<maintainer type="project">
+		<email>cluster@gentoo.org</email>
+		<name>Gentoo Cluster Project</name>
+	</maintainer>
+</pkgmetadata>
diff --git a/acct-user/slurm/slurm-0.ebuild b/acct-user/slurm/slurm-0.ebuild
new file mode 100644
index 000000000000..1b68993e398a
--- /dev/null
+++ b/acct-user/slurm/slurm-0.ebuild
@@ -0,0 +1,14 @@
+# Copyright 2019 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+inherit acct-user
+
+DESCRIPTION="User for the slurm - Highly Scalable Resource Manager"
+ACCT_USER_ID=500
+ACCT_USER_HOME=/var/lib/slurm
+ACCT_USER_HOME_PERMS=0770
+ACCT_USER_GROUPS=( slurm )
+
+acct-user_add_deps
-- 
2.23.0


[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: [gentoo-dev] [RFC] Reserve slurm user and group uid/gid 500/500

[Mike Gilbert]

On Fri, Aug 23, 2019 at 3:27 PM Alexey 'Alexxy' Shvetsov
<alexxy@gentoo.org> wrote:
>
> Hi!
>
> I'd like to reserve slurm user and group for sys-cluster/slurm. I plan to use
> old uid/gid for it (500/500)
>

I think we are trying to avoid using 500 too 999 for the time being.
Can you pick another number lower than 500?

Re: [gentoo-dev] [RFC] Reserve slurm user and group uid/gid 500/500

[Alexey 'Alexxy' Shvetsov]

[-- Attachment #1: Type: text/plain, Size: 570 bytes --]

В письме от пятница, 23 августа 2019 г. 22:39:29 MSK пользователь Mike Gilbert 
написал:
> On Fri, Aug 23, 2019 at 3:27 PM Alexey 'Alexxy' Shvetsov
> 
> <alexxy@gentoo.org> wrote:
> > Hi!
> > 
> > I'd like to reserve slurm user and group for sys-cluster/slurm. I plan to
> > use old uid/gid for it (500/500)
> 
> I think we are trying to avoid using 500 too 999 for the time being.
> Can you pick another number lower than 500?

uid/gid 500 was used for historical reasons. So i can change it to other uid/
gid like 300 or 400 

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: [gentoo-dev] [RFC] Reserve slurm user and group uid/gid 500/500

[Ulrich Mueller]

[-- Attachment #1: Type: text/plain, Size: 487 bytes --]

>>>>> On Fri, 23 Aug 2019, Alexey 'Alexxy' Shvetsov wrote:

> В письме от пятница, 23 августа 2019 г. 22:39:29 MSK пользователь
> Mike Gilbert написал:

>> I think we are trying to avoid using 500 too 999 for the time being.
>> Can you pick another number lower than 500?

> uid/gid 500 was used for historical reasons. So i can change it to
> other uid/gid like 300 or 400

Please do. Either of them should be available.

Ulrich

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 487 bytes --]

Re: [gentoo-dev] [RFC] Reserve slurm user and group uid/gid 500/500

[Michael Orlitzky]

On 8/23/19 3:27 PM, Alexey 'Alexxy' Shvetsov wrote:
> +DESCRIPTION="User for the slurm - Highly Scalable Resource Manager"
> +ACCT_USER_ID=500
> +ACCT_USER_HOME=/var/lib/slurm
> +ACCT_USER_HOME_PERMS=0770
> +ACCT_USER_GROUPS=( slurm )

If your package uses that directory, I would recommend you not rely on
it being created (with special permissions) as a side effect of
installing the acct-user package:

https://archives.gentoo.org/gentoo-dev/message/fc55ac57cd92d9c1e156d13c882b08cf

That used to be acceptable, since the "enewuser" command with the home
directory was part of the package that used that directory. But now that
the user data are in another package, we can't depend on them reliably.

Re: [gentoo-dev] [RFC] Reserve slurm user and group uid/gid 500/500

[Michał Górny]

[-- Attachment #1: Type: text/plain, Size: 1005 bytes --]

On Fri, 2019-08-23 at 15:40 -0400, Michael Orlitzky wrote:
> On 8/23/19 3:27 PM, Alexey 'Alexxy' Shvetsov wrote:
> > +DESCRIPTION="User for the slurm - Highly Scalable Resource Manager"
> > +ACCT_USER_ID=500
> > +ACCT_USER_HOME=/var/lib/slurm
> > +ACCT_USER_HOME_PERMS=0770
> > +ACCT_USER_GROUPS=( slurm )
> 
> If your package uses that directory, I would recommend you not rely on
> it being created (with special permissions) as a side effect of
> installing the acct-user package:
> 
> https://archives.gentoo.org/gentoo-dev/message/fc55ac57cd92d9c1e156d13c882b08cf
> 
> That used to be acceptable, since the "enewuser" command with the home
> directory was part of the package that used that directory. But now that
> the user data are in another package, we can't depend on them reliably.
> 

...and why is that, exactly?  Are you assuming that someone will take
over the dedicated user for another purpose and change its home
directory?

-- 
Best regards,
Michał Górny


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 618 bytes --]

Re: [gentoo-dev] [RFC] Reserve slurm user and group uid/gid 500/500

[Michael Orlitzky]

On 8/23/19 3:45 PM, Michał Górny wrote:
>>
>> That used to be acceptable, since the "enewuser" command with the home
>> directory was part of the package that used that directory. But now that
>> the user data are in another package, we can't depend on them reliably.
>>
> 
> ...and why is that, exactly?  Are you assuming that someone will take
> over the dedicated user for another purpose and change its home
> directory?
> 

The fact that the home directory can change is a feature that you
yourself went out of the way to support. We can't rely on the value of
ACCT_USER_HOME in a dependency, and nothing is gained by doing so -- so
why do it? That's one reason.

It also greatly simplifies the guidelines. Have you ever refactored
something and had it just feel right? This just feels right. I think
most developers don't care about these details and would just like to
get the job done. If we can give them a list of a few simple guidelines
to follow, then everyone's happy.

If we put the keepdir/fowners/fperms in the logically-correct place, it
allows us to also say: don't use a home directory owned by another
package (use the default). That in turn prevents acct-user packages from
clobbering the permissions and ownership on stuff that belongs to
somebody else. All pros, no cons.

Re: [gentoo-dev] [RFC] Reserve slurm user and group uid/gid 500/500

[Alexey 'Alexxy' Shvetsov]

[-- Attachment #1: Type: text/plain, Size: 932 bytes --]

В письме от пятница, 23 августа 2019 г. 22:40:54 MSK пользователь Michael 
Orlitzky написал:
> On 8/23/19 3:27 PM, Alexey 'Alexxy' Shvetsov wrote:
> > +DESCRIPTION="User for the slurm - Highly Scalable Resource Manager"
> > +ACCT_USER_ID=500
> > +ACCT_USER_HOME=/var/lib/slurm
> > +ACCT_USER_HOME_PERMS=0770
> > +ACCT_USER_GROUPS=( slurm )
> 
> If your package uses that directory, I would recommend you not rely on
> it being created (with special permissions) as a side effect of
> installing the acct-user package:
> 
> https://archives.gentoo.org/gentoo-dev/message/fc55ac57cd92d9c1e156d13c882b0
> 8cf
> 
> That used to be acceptable, since the "enewuser" command with the home
> directory was part of the package that used that directory. But now that
> the user data are in another package, we can't depend on them reliably.

I'll check if it will work for me. 

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: [gentoo-dev] [RFC] Reserve slurm user and group uid/gid 400/400

[Alexey 'Alexxy' Shvetsov]

[-- Attachment #1: Type: text/plain, Size: 230 bytes --]

Since 500/500 is reserved uid/gid then i'll proceed with 400|400

> Hi!
> 
> I'd like to reserve slurm user and group for sys-cluster/slurm. I plan to
> use old uid/gid for it (500/500)


-- 
Best regards,
Alexey 'Alexxy' Shvetsov

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]