Attila Pinter changed bug 1166743
What Removed Added
CC   adathor@opensuse.org

Comment # 2 on bug 1166743 from
This issue came up yesterday/today on the MicroOS group on Telegram and we did
some testing. 

1. Installed MicroOS server (not container host), no user is created only root.
Steps after the installation was finished:
  Installed `podman`, added a user with `useradd -m test -s /bin/bash` and
`/etc/subuid` and `/etc/subgid` got filled with the correct user namespace
values.

2. Installed MicroOS Desktop Gnome, user is being created by YaST during the
installation.
Steps after the installation was finished:
  Reinstalled `podman` with pkcon, the user that was created by YaST during
installation didn't get updated in `/etc/subuid` and `/etc/subgid`. Added a
user with `useradd -m test -s /bin/bash` and `/etc/subuid` and `/etc/subgid`
got filled with the correct user namespace values.

3. Installed Tumbleweed XFCE desktop, user is being created by YaST.
Steps after the installation was finished:
  Installed `podman` with `zypper`, the user that was created by YaST during
installation didn't get updated in `/etc/subuid` and `/etc/subgid`. Added a
user with `useradd -m test -s /bin/bash` and `/etc/subuid` and `/etc/subgid`
got filled with the correct user namespace values. 
However, added a user with `YaST2>Security and Users>User and Group management`
and the `subuid/subgid` files has not been updated.

4. Installed Fedora 34 KDE spin, user is being create by Anaconda:
  Installed `podman` with `dnf`, the `subuid/subgid` files has been updated and
user namespace has been enabled.

From our primitive tests it looks like that the way YaST is creating users is
not being picked up by `shadow` or `podman` or whatever handles subuid/subgid -
sorry, but not sure what is responsible updating the user namespaces -. Hope
this helps a little. 

(The test started here, cli outputs and some additional context is available if
required: https://t.me/openSUSE_MicroOS_Desktop/9750)


You are receiving this mail because: