What | Removed | Added |
---|---|---|
CC | adathor@opensuse.org |
This issue came up yesterday/today on the MicroOS group on Telegram and we did some testing. 1. Installed MicroOS server (not container host), no user is created only root. Steps after the installation was finished: Installed `podman`, added a user with `useradd -m test -s /bin/bash` and `/etc/subuid` and `/etc/subgid` got filled with the correct user namespace values. 2. Installed MicroOS Desktop Gnome, user is being created by YaST during the installation. Steps after the installation was finished: Reinstalled `podman` with pkcon, the user that was created by YaST during installation didn't get updated in `/etc/subuid` and `/etc/subgid`. Added a user with `useradd -m test -s /bin/bash` and `/etc/subuid` and `/etc/subgid` got filled with the correct user namespace values. 3. Installed Tumbleweed XFCE desktop, user is being created by YaST. Steps after the installation was finished: Installed `podman` with `zypper`, the user that was created by YaST during installation didn't get updated in `/etc/subuid` and `/etc/subgid`. Added a user with `useradd -m test -s /bin/bash` and `/etc/subuid` and `/etc/subgid` got filled with the correct user namespace values. However, added a user with `YaST2>Security and Users>User and Group management` and the `subuid/subgid` files has not been updated. 4. Installed Fedora 34 KDE spin, user is being create by Anaconda: Installed `podman` with `dnf`, the `subuid/subgid` files has been updated and user namespace has been enabled. From our primitive tests it looks like that the way YaST is creating users is not being picked up by `shadow` or `podman` or whatever handles subuid/subgid - sorry, but not sure what is responsible updating the user namespaces -. Hope this helps a little. (The test started here, cli outputs and some additional context is available if required: https://t.me/openSUSE_MicroOS_Desktop/9750)