unofficial mirror of bug-guix@gnu.org 
 help / color / mirror / code / Atom feed
* bug#52539: Fwd: Comments in /etc/passwd don't get updated
       [not found] <CAAkdc5CeSKJh8h1qvwX8fiDNS2rjXyr-4qWPEU0ZBy4+FZTDoQ@mail.gmail.com>
@ 2021-12-16  7:00 ` Jacob First
  2021-12-17  4:02   ` Liliana Marie Prikler
                     ` (2 more replies)
  0 siblings, 3 replies; 7+ messages in thread
From: Jacob First @ 2021-12-16  7:00 UTC (permalink / raw)
  To: 52539

In my Guix system's /etc/passwd file, my user named "abc" has a
comment attached to it. The relevant line is:

    abc:x:1000:998:Old
Comment:/home/jkf:/gnu/store/71yp1p06jy2j96bfdz43f4p6ncdym5a1-zsh-5.8/bin/zsh

Today the users section of my current config.scm looks like this:

    (users (cons* (user-account
                    (name "abc")
                    (group "users")
                    (comment "New Comment")
                    (supplementary-groups '("wheel"
                                            "netdev"
                                            "audio"
                                            "video"
                                            "disk"
                                            "cdrom"
                                            "docker"
                                            "libvirt"
                                            "kvm"))
                    (shell #~(string-append #$zsh "/bin/zsh")))
                   %base-user-accounts))

After I apply this configuration with `guix system reconfigure', I
expect /etc/passwd to have been updated with "New Comment" in place of
"Old Comment". However, "Old Comment" remains.

Similarly, if I omit the `comment' field entirely, I expect my user
comment to be removed from /etc/passwd, since the default value of the
`comment' field is documented to be an empty string (manual 10.6).
Again, the old comment remains.

I am reporting this on a recent Guix version cev9c6c5, but have
noticed this issue for a year at least.




^ permalink raw reply	[flat|nested] 7+ messages in thread

* bug#52539: Fwd: Comments in /etc/passwd don't get updated
  2021-12-16  7:00 ` bug#52539: Fwd: Comments in /etc/passwd don't get updated Jacob First
@ 2021-12-17  4:02   ` Liliana Marie Prikler
  2021-12-20 23:45     ` Jacob First
  2021-12-22 22:36   ` Ludovic Courtès
       [not found]   ` <handler.52539.D52539.164097194432533.notifdone@debbugs.gnu.org>
  2 siblings, 1 reply; 7+ messages in thread
From: Liliana Marie Prikler @ 2021-12-17  4:02 UTC (permalink / raw)
  To: Jacob First, 52539

Hi,

Am Donnerstag, dem 16.12.2021 um 07:00 +0000 schrieb Jacob First:
> In my Guix system's /etc/passwd file, my user named "abc" has a
> comment attached to it. The relevant line is:
> 
>     abc:x:1000:998:Old
> Comment:/home/jkf:/gnu/store/71yp1p06jy2j96bfdz43f4p6ncdym5a1-zsh-
> 5.8/bin/zsh
> 
> Today the users section of my current config.scm looks like this:
> 
>     (users (cons* (user-account
>                     (name "abc")
>                     (group "users")
>                     (comment "New Comment")
>                     (supplementary-groups '("wheel"
>                                             "netdev"
>                                             "audio"
>                                             "video"
>                                             "disk"
>                                             "cdrom"
>                                             "docker"
>                                             "libvirt"
>                                             "kvm"))
>                     (shell #~(string-append #$zsh "/bin/zsh")))
>                    %base-user-accounts))
> 
> After I apply this configuration with `guix system reconfigure', I
> expect /etc/passwd to have been updated with "New Comment" in place
> of "Old Comment". However, "Old Comment" remains.
> 
> Similarly, if I omit the `comment' field entirely, I expect my user
> comment to be removed from /etc/passwd, since the default value of
> the `comment' field is documented to be an empty string (manual
> 10.6). Again, the old comment remains.
> 
> I am reporting this on a recent Guix version cev9c6c5, but have
> noticed this issue for a year at least.
What if you were to temporarily change your login shell to let's say
bash?  IIRC, Guix is quite lazy when it comes to updating these values,
but a change in the shell ought to get them revised.  I think the
reason behind it is that it doesn't want to lock you out by messing
with the password field, but that's a little unrelated here.

Cheers





^ permalink raw reply	[flat|nested] 7+ messages in thread

* bug#52539: Fwd: Comments in /etc/passwd don't get updated
  2021-12-17  4:02   ` Liliana Marie Prikler
@ 2021-12-20 23:45     ` Jacob First
  0 siblings, 0 replies; 7+ messages in thread
From: Jacob First @ 2021-12-20 23:45 UTC (permalink / raw)
  To: 52539

Changing the shell indeed causes the comment to be updated.

If lazy update is the correct behavior, then the docs about user
accounts are a bit misleading:

"When booting or upon completion of guix system reconfigure, the
system ensures that only the user accounts and groups specified in the
operating-system declaration exist, and with the specified properties.
Thus, account or group creations or modifications made by directly
invoking commands such as useradd are lost upon reconfiguration or
reboot. This ensures that the system remains exactly as declared."

As a user it would be helpful to know from the docs that some of the
fields actually persist across reboots/reconfigurations.

Thanks for the workaround in any case!

On Fri, Dec 17, 2021 at 4:02 AM Liliana Marie Prikler
<liliana.prikler@gmail.com> wrote:
>
> Hi,
>
> Am Donnerstag, dem 16.12.2021 um 07:00 +0000 schrieb Jacob First:
> > In my Guix system's /etc/passwd file, my user named "abc" has a
> > comment attached to it. The relevant line is:
> >
> >     abc:x:1000:998:Old
> > Comment:/home/jkf:/gnu/store/71yp1p06jy2j96bfdz43f4p6ncdym5a1-zsh-
> > 5.8/bin/zsh
> >
> > Today the users section of my current config.scm looks like this:
> >
> >     (users (cons* (user-account
> >                     (name "abc")
> >                     (group "users")
> >                     (comment "New Comment")
> >                     (supplementary-groups '("wheel"
> >                                             "netdev"
> >                                             "audio"
> >                                             "video"
> >                                             "disk"
> >                                             "cdrom"
> >                                             "docker"
> >                                             "libvirt"
> >                                             "kvm"))
> >                     (shell #~(string-append #$zsh "/bin/zsh")))
> >                    %base-user-accounts))
> >
> > After I apply this configuration with `guix system reconfigure', I
> > expect /etc/passwd to have been updated with "New Comment" in place
> > of "Old Comment". However, "Old Comment" remains.
> >
> > Similarly, if I omit the `comment' field entirely, I expect my user
> > comment to be removed from /etc/passwd, since the default value of
> > the `comment' field is documented to be an empty string (manual
> > 10.6). Again, the old comment remains.
> >
> > I am reporting this on a recent Guix version cev9c6c5, but have
> > noticed this issue for a year at least.
> What if you were to temporarily change your login shell to let's say
> bash?  IIRC, Guix is quite lazy when it comes to updating these values,
> but a change in the shell ought to get them revised.  I think the
> reason behind it is that it doesn't want to lock you out by messing
> with the password field, but that's a little unrelated here.
>
> Cheers
>




^ permalink raw reply	[flat|nested] 7+ messages in thread

* bug#52539: Fwd: Comments in /etc/passwd don't get updated
  2021-12-16  7:00 ` bug#52539: Fwd: Comments in /etc/passwd don't get updated Jacob First
  2021-12-17  4:02   ` Liliana Marie Prikler
@ 2021-12-22 22:36   ` Ludovic Courtès
  2021-12-26 21:56     ` Jacob First
       [not found]   ` <handler.52539.D52539.164097194432533.notifdone@debbugs.gnu.org>
  2 siblings, 1 reply; 7+ messages in thread
From: Ludovic Courtès @ 2021-12-22 22:36 UTC (permalink / raw)
  To: Jacob First; +Cc: 52539

Hi,

Jacob First <jacob.first@member.fsf.org> skribis:

> After I apply this configuration with `guix system reconfigure', I
> expect /etc/passwd to have been updated with "New Comment" in place of
> "Old Comment". However, "Old Comment" remains.

This is on purpose, per these lines in ‘allocate-passwd’ in (gnu build
accounts):

           (real-name (if previous
                          (password-entry-real-name previous)
                          real-name))

This wasn’t a firm decision, but I think the rationale here could be
that we’d rather allow users to change their name with ‘chfn’ to
something other than what the sysadmin chose, than enforce the
sysadmin’s choice.  (Except that ‘chfn’ is currently not setuid by
default on Guix System, so the scenario above is unlikely.)

Thoughts?

Thanks,
Ludo’.




^ permalink raw reply	[flat|nested] 7+ messages in thread

* bug#52539: Fwd: Comments in /etc/passwd don't get updated
  2021-12-22 22:36   ` Ludovic Courtès
@ 2021-12-26 21:56     ` Jacob First
  2021-12-31 17:32       ` Ludovic Courtès
  0 siblings, 1 reply; 7+ messages in thread
From: Jacob First @ 2021-12-26 21:56 UTC (permalink / raw)
  To: Ludovic Courtès; +Cc: 52539

Thanks for the explanation. This rationale sounds reasonable to me. If
someone with proper permission has modified a user account's comment,
it could be important to preserve that customization.

As I pointed out in an earlier message, I believe this behavior
contradicts the documentation of the `user-account' data type pretty
strongly. So it appears there is at least a "doc bug" here.

FWIW, I actually reported the present behavior as a bug not because of
the doc issue, but based on an assumption that "purely declarative"
implied the result of applying a given configuration should not depend
on any preexisting system state like a user comment. Sorry for not
making that clear: it seemed obvious, but I think it's actually a
misconception (even if user accounts are one of the few areas, AFAICT,
where the property doesn't hold true).

On Wed, Dec 22, 2021 at 10:36 PM Ludovic Courtès <ludo@gnu.org> wrote:
>
> Hi,
>
> Jacob First <jacob.first@member.fsf.org> skribis:
>
> > After I apply this configuration with `guix system reconfigure', I
> > expect /etc/passwd to have been updated with "New Comment" in place of
> > "Old Comment". However, "Old Comment" remains.
>
> This is on purpose, per these lines in ‘allocate-passwd’ in (gnu build
> accounts):
>
>            (real-name (if previous
>                           (password-entry-real-name previous)
>                           real-name))
>
> This wasn’t a firm decision, but I think the rationale here could be
> that we’d rather allow users to change their name with ‘chfn’ to
> something other than what the sysadmin chose, than enforce the
> sysadmin’s choice.  (Except that ‘chfn’ is currently not setuid by
> default on Guix System, so the scenario above is unlikely.)
>
> Thoughts?
>
> Thanks,
> Ludo’.




^ permalink raw reply	[flat|nested] 7+ messages in thread

* bug#52539: Fwd: Comments in /etc/passwd don't get updated
  2021-12-26 21:56     ` Jacob First
@ 2021-12-31 17:32       ` Ludovic Courtès
  0 siblings, 0 replies; 7+ messages in thread
From: Ludovic Courtès @ 2021-12-31 17:32 UTC (permalink / raw)
  To: Jacob First; +Cc: 52539-done

Hi Jacob,

Jacob First <jacob.first@member.fsf.org> skribis:

> Thanks for the explanation. This rationale sounds reasonable to me. If
> someone with proper permission has modified a user account's comment,
> it could be important to preserve that customization.
>
> As I pointed out in an earlier message, I believe this behavior
> contradicts the documentation of the `user-account' data type pretty
> strongly. So it appears there is at least a "doc bug" here.
>
> FWIW, I actually reported the present behavior as a bug not because of
> the doc issue, but based on an assumption that "purely declarative"
> implied the result of applying a given configuration should not depend
> on any preexisting system state like a user comment. Sorry for not
> making that clear: it seemed obvious, but I think it's actually a
> misconception (even if user accounts are one of the few areas, AFAICT,
> where the property doesn't hold true).

I clarified this and ensures ‘chfn’ is actually usable in commit
c76775263e56a10cc1b84d03a5827f42436afe40.

Thanks!

Ludo’.




^ permalink raw reply	[flat|nested] 7+ messages in thread

* bug#52539: Fwd: Comments in /etc/passwd don't get updated
       [not found]   ` <handler.52539.D52539.164097194432533.notifdone@debbugs.gnu.org>
@ 2022-01-01 14:22     ` Ludovic Courtès
  0 siblings, 0 replies; 7+ messages in thread
From: Ludovic Courtès @ 2022-01-01 14:22 UTC (permalink / raw)
  To: Jacob First, 52539

> I clarified this and ensures ‘chfn’ is actually usable in commit
> c76775263e56a10cc1b84d03a5827f42436afe40.

Oops, I hadn’t pushed; the right commit ID is
671e6a81804f264ddcdd6fe7579644404da079b8.

Ludo’.




^ permalink raw reply	[flat|nested] 7+ messages in thread

end of thread, other threads:[~2022-01-01 14:23 UTC | newest]

Thread overview: 7+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
     [not found] <CAAkdc5CeSKJh8h1qvwX8fiDNS2rjXyr-4qWPEU0ZBy4+FZTDoQ@mail.gmail.com>
2021-12-16  7:00 ` bug#52539: Fwd: Comments in /etc/passwd don't get updated Jacob First
2021-12-17  4:02   ` Liliana Marie Prikler
2021-12-20 23:45     ` Jacob First
2021-12-22 22:36   ` Ludovic Courtès
2021-12-26 21:56     ` Jacob First
2021-12-31 17:32       ` Ludovic Courtès
     [not found]   ` <handler.52539.D52539.164097194432533.notifdone@debbugs.gnu.org>
2022-01-01 14:22     ` Ludovic Courtès

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).