Re: [atomic-devel] Consiering a host UID/GID upgrade discontinuity (breaking CentOS7 Atomic and F22)

[Colin Walters <walters verbum org>]

On Mon, May 4, 2015, at 12:18 PM, Joe Brockmeier wrote:
>
> Can we still do this change now? Does it impact anything else? (/me
> wonders if we need a freeze exception or whatnot)

It's obviously a pretty gigantic freeze exception...but there's no
access control, change management etc. over the "fedora-atomic"
git repository (nor spin-kickstarts), just over the RPMs.
 
> Can we make sure to have this as a topic for Thursday's meeting (CentOS
> SIG) and perhaps the Wednesday Cloud Working Group meeting (Fedora)? In
> fact, we might need a Trac ticket for this w/in Fedora. Thoughts?

Yep, let's discuss in both.

For reference, I've attached the patch.  I tested it with a local tree compose
and a rebase from RHELAH 7.1.1-1, it worked.

From 8727110b5244f8329c30491f4f25800244c760f8 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters verbum org>
Date: Wed, 6 May 2015 00:02:22 -0400
Subject: [PATCH] passwd/group: Change to match downstream Red Hat Enterprise
 Linux

https://lists.projectatomic.io/projectatomic-archives/atomic-devel/2015-April/msg00081.html
---
 group  | 30 ++++++++++++++++--------------
 passwd | 22 ++++++++++++----------
 2 files changed, 28 insertions(+), 24 deletions(-)

diff --git a/group b/group
index a524089..4c705b5 100644
--- a/group
+++ b/group
@@ -24,25 +24,27 @@ nobody:x:99:
 users:x:100:
 utmp:x:22:
 utempter:x:35:
-input:x:999:
+ssh_keys:x:999:
 systemd-journal:x:190:
-systemd-timesync:x:998:
-systemd-network:x:997:
-systemd-resolve:x:996:
-systemd-bus-proxy:x:995:
 dbus:x:81:
-polkitd:x:994:
-dockerroot:x:993:
-ssh_keys:x:992:
+polkitd:x:998:
+etcd:x:997:
+dip:x:40:
+cgred:x:996:
 tss:x:59:
-cgred:x:991:
-rpc:x:32:
-etcd:x:990:
 avahi-autoipd:x:170:
-cockpit-ws:x:989:
-dip:x:40:
-kube:x:988:
+rpc:x:32:
+sssd:x:993:
+dockerroot:x:996:
 rpcuser:x:29:
 nfsnobody:x:65534:
+kube:x:994:
 sshd:x:74:
+chrony:x:992:
 tcpdump:x:72:
+input:x:999:
+systemd-timesync:x:991:
+systemd-network:x:990:
+systemd-resolve:x:989:
+systemd-bus-proxy:x:988:
+cockpit-ws:x:987:
diff --git a/passwd b/passwd
index a1d369e..fa995ff 100644
--- a/passwd
+++ b/passwd
@@ -11,20 +11,22 @@ operator:x:11:0:operator:/root:/sbin/nologin
 games:x:12:100:games:/usr/games:/sbin/nologin
 ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
 nobody:x:99:99:Nobody:/:/sbin/nologin
-systemd-timesync:x:999:998:systemd Time Synchronization:/:/sbin/nologin
-systemd-network:x:998:997:systemd Network Management:/:/sbin/nologin
-systemd-resolve:x:997:996:systemd Resolver:/:/sbin/nologin
-systemd-bus-proxy:x:996:995:systemd Bus Proxy:/:/sbin/nologin
 dbus:x:81:81:System message bus:/:/sbin/nologin
-polkitd:x:995:994:User for polkitd:/:/sbin/nologin
-dockerroot:x:994:993:Docker User:/var/lib/docker:/sbin/nologin
+polkitd:x:999:998:User for polkitd:/:/sbin/nologin
+etcd:x:998:997:etcd user:/var/lib/etcd:/sbin/nologin
 tss:x:59:59:Account used by the trousers package to sandbox the tcsd daemon:/dev/null:/sbin/nologin
-rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/sbin/nologin
-etcd:x:994:990:etcd user:/var/lib/etcd:/sbin/nologin
 avahi-autoipd:x:170:170:Avahi IPv4LL Stack:/var/lib/avahi-autoipd:/sbin/nologin
-cockpit-ws:x:993:989:User for cockpit-ws:/:/sbin/nologin
-kube:x:992:988:Kubernetes user:/:/sbin/nologin
+rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/sbin/nologin
+sssd:x:995:993:User for sssd:/:/sbin/nologin
+dockerroot:x:997:996:Docker User:/var/lib/docker:/sbin/nologin
 rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
 nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
+kube:x:996:994:Kubernetes user:/:/sbin/nologin
 sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
+chrony:x:994:992::/var/lib/chrony:/sbin/nologin
 tcpdump:x:72:72::/:/sbin/nologin
+systemd-timesync:x:993:991:systemd Time Synchronization:/:/sbin/nologin
+systemd-network:x:991:990:systemd Network Management:/:/sbin/nologin
+systemd-resolve:x:990:989:systemd Resolver:/:/sbin/nologin
+systemd-bus-proxy:x:989:988:systemd Bus Proxy:/:/sbin/nologin
+cockpit-ws:x:988:987:User for cockpit-ws:/:/sbin/nologin
-- 
1.8.3.1