Creating a new user for Hashicorp Vault and its fork OpenBao?
Hi all, I found that there is a fork of Hashicorp Vault, called OpenBao, in the works. To prepare for packaging it, I started packaging Vault (to avoid errors due to OpenBao being pre-alpha and in the middle of forking, it seems). The package seems to be working, but I require a user and group for running vault. AFAIK I need to create a package for the user, something like system-user-prometheus or system-user-wwwrun. Is there a process to request users and groups, to avoid clashes in regards to UIDs and such? The wiki gave nothing (or my search sucked...). Or do I simply omit the UID, as in the prometheus package? Thanks in advance! Puzzled, Johannes
On Tue, 6 Feb 2024 at 08:49, Johannes Kastl <mail@ojkastl.de> wrote:
Hi all,
I found that there is a fork of Hashicorp Vault, called OpenBao, in the works.
To prepare for packaging it, I started packaging Vault (to avoid errors due to OpenBao being pre-alpha and in the middle of forking, it seems).
The package seems to be working, but I require a user and group for running vault. AFAIK I need to create a package for the user, something like system-user-prometheus or system-user-wwwrun.
No such split is needed if the user/group is only needed by that package, keep it in the main package. If another package requires the user/group, create a subpackage following that naming scheme. There is no formal process for registering a user/group (apart from an rpmlint warning but this is largely pointless especially post RPM 4.19 autodeps) For more information: https://en.opensuse.org/openSUSE:Packaging_guidelines#Users_and_Groups
Is there a process to request users and groups, to avoid clashes in regards to UIDs and such? The wiki gave nothing (or my search sucked...).
UID assignment is done at runtime by shadow/systemd-sysusers
Or do I simply omit the UID, as in the prometheus package?
Thanks in advance!
Puzzled, Johannes
Ignore the other copy of this email, I sent using the wrong outgoing email address so it didn't reach the mailing list, this one will. -- Callum Farmer gmbr3@opensuse.org openSUSE - gmbr3
participants (2)
-
Callum Farmer
-
Johannes Kastl