Re: [PATCH v2 0/2] Create systemd users at build time

["Puustinen, Ismo" <ismo.puustinen@intel.com>]

On Wed, 2016-05-11 at 12:04 -0700, Stephano Cetola wrote:
> > I think this is a valuable feature. However, have you considered
> > adding
> > the "m" and "r" options too? I think that at least "m" would be
> > worthwhile to implement, since it's important to be able to add
> > users
> > to different groups for privilege management.
>
> I added "--system" to both useradd and groupadd, and I believe that
> is
> the same as "-r". Please correct me if I am wrong there.
> 
> I do not see how the "-m" option would help with groups. I thought
> that
> simply added a skeleton home directory. Could you give me an example?

I mean that when you parse the sysusers.d configuration file
in create_systemd_sysusers() function, you only parse the lines
starting with 'u' and 'g'. You are skipping 'm' and 'r'. See:

https://www.freedesktop.org/software/systemd/man/sysusers.d.html

What I'm after is a generic mechanism for reading all sysusers.d/
configuration files during image creation and creating the necessary
users and groups during that time. You could also separate mechanism
and policy, meaning that the list of files to parse could come from
outside of the create_systemd_sysusers() function.

Ismo