Re: normal user for Intel BSPs?

[Scott Garman <scott.a.garman@intel.com>]

On 01/25/2012 02:18 PM, Darren Hart wrote:
> On 01/25/2012 09:36 AM, jfabernathy wrote:
>> I've noticed that the meta-intel BSP come up with the default
>> terminal, serial console user, etc. as root.  What would it take to
>> make my own BSP that was exactly the same, but the default was a not
>> admin user, but you could su or sudo to root?
>
> I'm adding Scott G. who I believe has been working on the useradd
> scripts and such (to sanity check the following). I believe you should
> be able to setup new users by extending an image recipe with a new task
> to make the necessary useradd/mod etc calls on the rootfs prior to
> packaging it up.
>
> Scott, can you offer more detail on how that is done?

Hi Jim, Darren:

The useradd mechanism is for supporting custom users and groups in 
recipes. It sounds like what Jim may find more expedient would be to 
define a recipe which includes a first-boot script which creates the 
additional users/groups and then sets up custom ownership on the 
terminal, serial console user, etc. Otherwise you'd have to do this in 
several recipes.

Using the first-boot script approach is documented here:

http://www.yoctoproject.org/docs/current/poky-ref-manual/poky-ref-manual.html#usingpoky-extend-addpkg-postinstalls

Whereas using the useradd bitbake class is documented in an example 
recipe in meta-skeleton/recipes-skeleton/useradd/useradd-example.bb. 
There is also a slide deck you may find useful here:

http://wiki.yoctoproject.org/wiki/images/e/e6/Custom_Users_Groups_in_Yocto1.1.pdf

I'll also mention that I'm still shaking out bugs in the useradd 
mechanism. We have some race conditions that are complicating matters 
when building from sstate. So if you're using one of our stable 
releases, the first-boot script approach is probably your safest bet.

Scott

-- 
Scott Garman
Embedded Linux Engineer - Yocto Project
Intel Open Source Technology Center