Merge pull request #65698 from Infinisil/system-users

Increase the system user id range
2019-10-27 10:41:39 +01:00
parent 40272a77a3 23d920c8f0
commit de357d5781
3 changed files with 26 additions and 6 deletions
@@ -6,17 +6,27 @@ with lib;

 let

+  /*
+  There are three different sources for user/group id ranges, each of which gets
+  used by different programs:
+  - The login.defs file, used by the useradd, groupadd and newusers commands
+  - The update-users-groups.pl file, used by NixOS in the activation phase to
+    decide on which ids to use for declaratively defined users without a static
+    id
+  - Systemd compile time options -Dsystem-uid-max= and -Dsystem-gid-max=, used
+    by systemd for features like ConditionUser=@system and systemd-sysusers
+  */
  loginDefs =
    ''
      DEFAULT_HOME yes

      SYS_UID_MIN  400
-      SYS_UID_MAX  499
+      SYS_UID_MAX  999
      UID_MIN      1000
      UID_MAX      29999

      SYS_GID_MIN  400
-      SYS_GID_MAX  499
+      SYS_GID_MAX  999
      GID_MIN      1000
      GID_MAX      29999