[Buildroot] [PATCH] package/rauc-hawkbit-updater: fix missing user

[Buildroot] [PATCH] package/rauc-hawkbit-updater: fix missing user

[Gero Schwäricke]

Systemd support for the RAUC hawkbit updater was added in

  4aa7a4ad8a (package/rauc-hawkbit-updater: add systemd optional dependency, 2024-07-10)

This installs the RAUC hawkbit updater service, which executes as user
"rauc-hawkbit" [1], which doesn't exist by default.

[1] https://github.com/rauc/rauc-hawkbit-updater/blob/2711c0e02781eb9d97285c87197f1bafef75d0d1/script/rauc-hawkbit-updater.service

Signed-off-by: Gero Schwäricke <gero.schwaericke@sevenlab.de>
---
 package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk b/package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk
index da1c020bb6..5ee8414b91 100644
--- a/package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk
+++ b/package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk
@@ -15,6 +15,10 @@ RAUC_HAWKBIT_UPDATER_CFLAGS = $(TARGET_CFLAGS) -std=c99
 ifeq ($(BR2_PACKAGE_SYSTEMD),y)
 RAUC_HAWKBIT_UPDATER_DEPENDENCIES += systemd
 RAUC_HAWKBIT_UPDATER_CONF_OPTS += -Dsystemd=enabled
+# rauc-hawkbit-updater.service uses this user and group
+define RAUC_HAWKBIT_UPDATER_USERS
+	rauc-hawkbit -1 rauc-hawkbit -1 ! - - - RAUC Hawkbit Updater
+endef
 else
 RAUC_HAWKBIT_UPDATER_CONF_OPTS += -Dsystemd=disabled
 endif
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/rauc-hawkbit-updater: fix missing user

[Marcus Hoffmann via buildroot]

Hi Gero,

I found almost exactly this change in our local patches recently but 
didn't get around to upstreaming this yet... oops.

Small note below for something that should probably be changed for 
consistency.

On 15.07.25 18:00, Gero Schwäricke wrote:
> Systemd support for the RAUC hawkbit updater was added in
> 
>    4aa7a4ad8a (package/rauc-hawkbit-updater: add systemd optional dependency, 2024-07-10)
> 
> This installs the RAUC hawkbit updater service, which executes as user
> "rauc-hawkbit" [1], which doesn't exist by default.
> 
> [1] https://github.com/rauc/rauc-hawkbit-updater/blob/2711c0e02781eb9d97285c87197f1bafef75d0d1/script/rauc-hawkbit-updater.service
> 
> Signed-off-by: Gero Schwäricke <gero.schwaericke@sevenlab.de>

Reviewed-by: Marcus Hoffmann <buildroot@bubu1.eu>
> ---
>   package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk | 4 ++++
>   1 file changed, 4 insertions(+)
> 
> diff --git a/package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk b/package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk
> index da1c020bb6..5ee8414b91 100644
> --- a/package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk
> +++ b/package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk
> @@ -15,6 +15,10 @@ RAUC_HAWKBIT_UPDATER_CFLAGS = $(TARGET_CFLAGS) -std=c99
>   ifeq ($(BR2_PACKAGE_SYSTEMD),y)
>   RAUC_HAWKBIT_UPDATER_DEPENDENCIES += systemd
>   RAUC_HAWKBIT_UPDATER_CONF_OPTS += -Dsystemd=enabled
> +# rauc-hawkbit-updater.service uses this user and group
> +define RAUC_HAWKBIT_UPDATER_USERS
> +	rauc-hawkbit -1 rauc-hawkbit -1 ! - - - RAUC Hawkbit Updater

Other _USERS definitions in buildroot all use * instead of ! for the 
password field. Not sure if that makes any difference in password but 
(from shadow(5)) the convention seems to be that the '!' prefix is 
specifically for locked accounts.

> +endef
>   else
>   RAUC_HAWKBIT_UPDATER_CONF_OPTS += -Dsystemd=disabled
>   endif

Best,
Marcus
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/rauc-hawkbit-updater: fix missing user

[Marcus Hoffmann via buildroot]

On 15.07.25 20:02, Marcus Hoffmann wrote:
> Hi Gero,
> 
[...]
> 
> Other _USERS definitions in buildroot all use * instead of ! for the 
> password field. Not sure if that makes any difference in password but 

I meant "any difference *in practice*" :D

> (from shadow(5)) the convention seems to be that the '!' prefix is 
> specifically for locked accounts.
> 
>> +endef
>>   else
>>   RAUC_HAWKBIT_UPDATER_CONF_OPTS += -Dsystemd=disabled
>>   endif
> 
> Best,
> Marcus

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/rauc-hawkbit-updater: fix missing user

[Colin Foster]

On Tue, Jul 15, 2025 at 08:02:58PM +0200, Marcus Hoffmann wrote:
> [You don't often get email from buildroot@bubu1.eu. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]
> 
> Hi Gero,
> 
> I found almost exactly this change in our local patches recently but
> didn't get around to upstreaming this yet... oops.
> 
> Small note below for something that should probably be changed for
> consistency.
> 
> On 15.07.25 18:00, Gero Schwäricke wrote:
> > Systemd support for the RAUC hawkbit updater was added in
> > 
> >    4aa7a4ad8a (package/rauc-hawkbit-updater: add systemd optional dependency, 2024-07-10)
> > 
> > This installs the RAUC hawkbit updater service, which executes as user
> > "rauc-hawkbit" [1], which doesn't exist by default.
> > 
> > [1] https://github.com/rauc/rauc-hawkbit-updater/blob/2711c0e02781eb9d97285c87197f1bafef75d0d1/script/rauc-hawkbit-updater.service
> > 
> > Signed-off-by: Gero Schwäricke <gero.schwaericke@sevenlab.de>
> 
> Reviewed-by: Marcus Hoffmann <buildroot@bubu1.eu>

Apologies. When I implemented it I wasn't using systemd, so I didn't
come across it. In the last week I came across this for a hobby project,
but have been sitting on the patch.

Thanks for jumping on this!

Acked-by: Colin Foster <colin.foster@in-advantage.com>

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/rauc-hawkbit-updater: fix missing user

[Gero Schwäricke]

Hi Marcus,

On Tue Jul 15, 2025 at 8:02 PM CEST, Marcus Hoffmann wrote:
> Hi Gero,
>
> I found almost exactly this change in our local patches recently but 
> didn't get around to upstreaming this yet... oops.
>
> Small note below for something that should probably be changed for 
> consistency.
>
> On 15.07.25 18:00, Gero Schwäricke wrote:
>> Systemd support for the RAUC hawkbit updater was added in
>> 
>>    4aa7a4ad8a (package/rauc-hawkbit-updater: add systemd optional dependency, 2024-07-10)
>> 
>> This installs the RAUC hawkbit updater service, which executes as user
>> "rauc-hawkbit" [1], which doesn't exist by default.
>> 
>> [1] https://github.com/rauc/rauc-hawkbit-updater/blob/2711c0e02781eb9d97285c87197f1bafef75d0d1/script/rauc-hawkbit-updater.service
>> 
>> Signed-off-by: Gero Schwäricke <gero.schwaericke@sevenlab.de>
>
> Reviewed-by: Marcus Hoffmann <buildroot@bubu1.eu>
>> ---
>>   package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk | 4 ++++
>>   1 file changed, 4 insertions(+)
>> 
>> diff --git a/package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk b/package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk
>> index da1c020bb6..5ee8414b91 100644
>> --- a/package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk
>> +++ b/package/rauc-hawkbit-updater/rauc-hawkbit-updater.mk
>> @@ -15,6 +15,10 @@ RAUC_HAWKBIT_UPDATER_CFLAGS = $(TARGET_CFLAGS) -std=c99
>>   ifeq ($(BR2_PACKAGE_SYSTEMD),y)
>>   RAUC_HAWKBIT_UPDATER_DEPENDENCIES += systemd
>>   RAUC_HAWKBIT_UPDATER_CONF_OPTS += -Dsystemd=enabled
>> +# rauc-hawkbit-updater.service uses this user and group
>> +define RAUC_HAWKBIT_UPDATER_USERS
>> +	rauc-hawkbit -1 rauc-hawkbit -1 ! - - - RAUC Hawkbit Updater
>
> Other _USERS definitions in buildroot all use * instead of ! for the 
> password field. Not sure if that makes any difference in password but 
> (from shadow(5)) the convention seems to be that the '!' prefix is 
> specifically for locked accounts.
>

Thanks for the hint! I corrected this in v2 of the patch.

Best,
Gero

>> +endef
>>   else
>>   RAUC_HAWKBIT_UPDATER_CONF_OPTS += -Dsystemd=disabled
>>   endif
>
> Best,
> Marcus

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot