[PATCH] apt: Set gid to nogroup

[PATCH] apt: Set gid to nogroup

[jaeyoon.jung]

From: Jaeyoon Jung <jaeyoon.jung@lge.com>

With no --no-user-group, it tries to assign "_apt" gid which ends up
with an error when using static gid values and "_apt" is not defined in
USERADD_GID_TABLES. Conventionally "_apt" does not have its own gid but
rather uses "nogroup".

| apt was skipped: Recipe apt, package apt: normal groupname "_apt" does not have a static ID defined.

Signed-off-by: Jaeyoon Jung <jaeyoon.jung@lge.com>
---
 meta/recipes-devtools/apt/apt_3.0.3.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta/recipes-devtools/apt/apt_3.0.3.bb b/meta/recipes-devtools/apt/apt_3.0.3.bb
index 7f0a38ab29..d2dfe48e9a 100644
--- a/meta/recipes-devtools/apt/apt_3.0.3.bb
+++ b/meta/recipes-devtools/apt/apt_3.0.3.bb
@@ -38,7 +38,7 @@ inherit cmake perlnative bash-completion useradd
 
 # User is added to allow apt to drop privs, will runtime warn without
 USERADD_PACKAGES = "${PN}"
-USERADD_PARAM:${PN} = "--system --home /nonexistent --no-create-home _apt"
+USERADD_PARAM:${PN} = "--system --home /nonexistent --no-create-home --no-user-group --gid nogroup _apt"
 
 BBCLASSEXTEND = "native nativesdk"
 

Re: [OE-core] [PATCH] apt: Set gid to nogroup

[Mathieu Dubois-Briand]

On Wed Jan 28, 2026 at 3:25 AM CET, Jaeyoon Jung (LGE) via lists.openembedded.org wrote:
> From: Jaeyoon Jung <jaeyoon.jung@lge.com>
>
> With no --no-user-group, it tries to assign "_apt" gid which ends up
> with an error when using static gid values and "_apt" is not defined in
> USERADD_GID_TABLES. Conventionally "_apt" does not have its own gid but
> rather uses "nogroup".
>
> | apt was skipped: Recipe apt, package apt: normal groupname "_apt" does not have a static ID defined.
>
> Signed-off-by: Jaeyoon Jung <jaeyoon.jung@lge.com>
> ---

Hi Jaeyoon,

Thanks for your patch.

It looks like this is generating build errors in some condition. So far
it only shows during the reproducibility test:

2026-01-28 16:57:19,382 - oe-selftest - INFO -       ERROR: Nothing RPROVIDES 'apt' (but /srv/pokybuild/yocto-worker/reproducible/build/layers/openembedded-core/meta/recipes-sato/images/core-image-sato.bb, /srv/pokybuild/yocto-worker/reproducible/build/layers/openembedded-core/meta/recipes-extended/images/core-image-full-cmdline.bb, /srv/pokybuild/yocto-worker/reproducible/build/layers/openembedded-core/meta/recipes-graphics/images/core-image-weston.bb RDEPENDS on or otherwise requires it)
2026-01-28 16:57:19,382 - oe-selftest - INFO -       apt was skipped: Recipe apt, package apt: normal groupname "nogroup" does not have a static ID defined. Add nogroup to one of these files: /srv/pokybuild/yocto-worker/reproducible/build/build-st/meta-selftest/files/static-group

https://autobuilder.yoctoproject.org/valkyrie/#/builders/37/builds/3270

Can you have a look at the issue?

Thanks,
Mathieu

-- 
Mathieu Dubois-Briand, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

Re: [OE-core] [PATCH] apt: Set gid to nogroup

[정재윤/Task Leader/SW Platform(연)선행Platform개발실 Lightweight System Task]

[-- Attachment #1: Type: text/plain, Size: 2288 bytes --]

Thanks for reporting. I'm sending v2 that addresses the issue.

Best regards,
---
Jaeyoon Jung
Software Platform Lab. / Corporate R&D / LG Electronics Inc.


________________________________
From: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Sent: Thursday, January 29, 2026 20:13
To: 정재윤/Task Leader/SW Platform(연)선행Platform개발실 Lightweight System Task <jaeyoon.jung@lge.com>; openembedded-core@lists.openembedded.org <openembedded-core@lists.openembedded.org>
Subject: Re: [OE-core] [PATCH] apt: Set gid to nogroup

On Wed Jan 28, 2026 at 3:25 AM CET, Jaeyoon Jung (LGE) via lists.openembedded.org wrote:
> From: Jaeyoon Jung <jaeyoon.jung@lge.com>
>
> With no --no-user-group, it tries to assign "_apt" gid which ends up
> with an error when using static gid values and "_apt" is not defined in
> USERADD_GID_TABLES. Conventionally "_apt" does not have its own gid but
> rather uses "nogroup".
>
> | apt was skipped: Recipe apt, package apt: normal groupname "_apt" does not have a static ID defined.
>
> Signed-off-by: Jaeyoon Jung <jaeyoon.jung@lge.com>
> ---

Hi Jaeyoon,

Thanks for your patch.

It looks like this is generating build errors in some condition. So far
it only shows during the reproducibility test:

2026-01-28 16:57:19,382 - oe-selftest - INFO -       ERROR: Nothing RPROVIDES 'apt' (but /srv/pokybuild/yocto-worker/reproducible/build/layers/openembedded-core/meta/recipes-sato/images/core-image-sato.bb, /srv/pokybuild/yocto-worker/reproducible/build/layers/openembedded-core/meta/recipes-extended/images/core-image-full-cmdline.bb, /srv/pokybuild/yocto-worker/reproducible/build/layers/openembedded-core/meta/recipes-graphics/images/core-image-weston.bb RDEPENDS on or otherwise requires it)
2026-01-28 16:57:19,382 - oe-selftest - INFO -       apt was skipped: Recipe apt, package apt: normal groupname "nogroup" does not have a static ID defined. Add nogroup to one of these files: /srv/pokybuild/yocto-worker/reproducible/build/build-st/meta-selftest/files/static-group

https://autobuilder.yoctoproject.org/valkyrie/#/builders/37/builds/3270

Can you have a look at the issue?

Thanks,
Mathieu

--
Mathieu Dubois-Briand, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com


[-- Attachment #2: Type: text/html, Size: 4962 bytes --]