normal user for Intel BSPs?

normal user for Intel BSPs?

[jfabernathy]

I've noticed that the meta-intel BSP come up with the default terminal, 
serial console user, etc. as root.  What would it take to make my own 
BSP that was exactly the same, but the default was a not admin user, but 
you could su or sudo to root?

Jim A

Re: normal user for Intel BSPs?

[Darren Hart]

On 01/25/2012 09:36 AM, jfabernathy wrote:
> I've noticed that the meta-intel BSP come up with the default
> terminal, serial console user, etc. as root.  What would it take to
> make my own BSP that was exactly the same, but the default was a not
> admin user, but you could su or sudo to root?

I'm adding Scott G. who I believe has been working on the useradd
scripts and such (to sanity check the following). I believe you should
be able to setup new users by extending an image recipe with a new task
to make the necessary useradd/mod etc calls on the rootfs prior to
packaging it up.

Scott, can you offer more detail on how that is done?

-- 
Darren Hart
Intel Open Source Technology Center
Yocto Project - Linux Kernel

Re: normal user for Intel BSPs?

[Scott Garman]

On 01/25/2012 02:18 PM, Darren Hart wrote:
> On 01/25/2012 09:36 AM, jfabernathy wrote:
>> I've noticed that the meta-intel BSP come up with the default
>> terminal, serial console user, etc. as root.  What would it take to
>> make my own BSP that was exactly the same, but the default was a not
>> admin user, but you could su or sudo to root?
>
> I'm adding Scott G. who I believe has been working on the useradd
> scripts and such (to sanity check the following). I believe you should
> be able to setup new users by extending an image recipe with a new task
> to make the necessary useradd/mod etc calls on the rootfs prior to
> packaging it up.
>
> Scott, can you offer more detail on how that is done?

Hi Jim, Darren:

The useradd mechanism is for supporting custom users and groups in 
recipes. It sounds like what Jim may find more expedient would be to 
define a recipe which includes a first-boot script which creates the 
additional users/groups and then sets up custom ownership on the 
terminal, serial console user, etc. Otherwise you'd have to do this in 
several recipes.

Using the first-boot script approach is documented here:

http://www.yoctoproject.org/docs/current/poky-ref-manual/poky-ref-manual.html#usingpoky-extend-addpkg-postinstalls

Whereas using the useradd bitbake class is documented in an example 
recipe in meta-skeleton/recipes-skeleton/useradd/useradd-example.bb. 
There is also a slide deck you may find useful here:

http://wiki.yoctoproject.org/wiki/images/e/e6/Custom_Users_Groups_in_Yocto1.1.pdf

I'll also mention that I'm still shaking out bugs in the useradd 
mechanism. We have some race conditions that are complicating matters 
when building from sstate. So if you're using one of our stable 
releases, the first-boot script approach is probably your safest bet.

Scott

-- 
Scott Garman
Embedded Linux Engineer - Yocto Project
Intel Open Source Technology Center

Re: normal user for Intel BSPs?

[James Abernathy]

On Jan 25, 2012, at 5:42 PM, Scott Garman wrote:

> On 01/25/2012 02:18 PM, Darren Hart wrote:
>> On 01/25/2012 09:36 AM, jfabernathy wrote:
>>> I've noticed that the meta-intel BSP come up with the default
>>> terminal, serial console user, etc. as root.  What would it take to
>>> make my own BSP that was exactly the same, but the default was a not
>>> admin user, but you could su or sudo to root?
>> 
>> I'm adding Scott G. who I believe has been working on the useradd
>> scripts and such (to sanity check the following). I believe you should
>> be able to setup new users by extending an image recipe with a new task
>> to make the necessary useradd/mod etc calls on the rootfs prior to
>> packaging it up.
>> 
>> Scott, can you offer more detail on how that is done?
> 
> Hi Jim, Darren:
> 
> The useradd mechanism is for supporting custom users and groups in recipes. It sounds like what Jim may find more expedient would be to define a recipe which includes a first-boot script which creates the additional users/groups and then sets up custom ownership on the terminal, serial console user, etc. Otherwise you'd have to do this in several recipes.
> 
> Using the first-boot script approach is documented here:
> 
> http://www.yoctoproject.org/docs/current/poky-ref-manual/poky-ref-manual.html#usingpoky-extend-addpkg-postinstalls
> 
> Whereas using the useradd bitbake class is documented in an example recipe in meta-skeleton/recipes-skeleton/useradd/useradd-example.bb. There is also a slide deck you may find useful here:
> 
> http://wiki.yoctoproject.org/wiki/images/e/e6/Custom_Users_Groups_in_Yocto1.1.pdf
> 
> I'll also mention that I'm still shaking out bugs in the useradd mechanism. We have some race conditions that are complicating matters when building from sstate. So if you're using one of our stable releases, the first-boot script approach is probably your safest bet.
> 
> Scott
> 

Thanks for these suggestions. I'll look them over and figure out what I want to do.

Jim A

> -- 
> Scott Garman
> Embedded Linux Engineer - Yocto Project
> Intel Open Source Technology Center