Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

manifests/passwd: align 'nologin' shell path with systemd defaults #1886

Merged
merged 1 commit into from
Aug 2, 2022

Conversation

lucab
Copy link
Contributor

@lucab lucab commented Aug 2, 2022

This updates all relevant shell fields to use /usr/sbin/nologin.
After the /usr hierarchy merge that happened in Fedora 17, the
nologin binary is now effectively located under /usr/sbin/.
For this reason, systemd-sysusers directly uses the latter path
as the default shell for system users.
While semantically equivalent, updating all entries to the new
location ensures that defaults are matching across all components.
In turn, that allows packages to avoid specifying a custom nologin
shell in sysusers.d fragment, and just rely on systemd defaults.

Refs:

This updates all relevant shell fields to use `/usr/sbin/nologin`.
After the `/usr` hierarchy merge that happened in Fedora 17, the
`nologin` binary is now effectively located under `/usr/sbin/`.
For this reason, `systemd-sysusers` directly uses the latter path
as the default shell for system users.
While semantically equivalent, updating all entries to the new
location ensures that defaults are matching across all components.
In turn, that allows packages to avoid specifying a custom `nologin`
shell in sysusers.d fragment, and just rely on systemd defaults.

Refs:
 * https://fedoraproject.org/wiki/Features/UsrMove
 * https://github.com/systemd/systemd/blob/v251/meson.build#L633
 * https://pagure.io/setup/pull-request/40
@lucab lucab merged commit ddd3db0 into coreos:testing-devel Aug 2, 2022
@lucab lucab deleted the ups/users-nologin-usrmerge branch August 2, 2022 18:03
@lucab
Copy link
Contributor Author

lucab commented Aug 3, 2022

@dustymabe just highlighting that we merged this changes to the passwd file, and I'm not sure if this will cause weird issues similar to coreos/fedora-coreos-tracker#1250. In case, let me know and update the ticket there with any new findings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants