On Sun, Dec 02, 2012 at 03:43:22PM +0000, Robert N. M. Watson wrote:
> 
> On 2 Dec 2012, at 15:34, Ryan Stone wrote:
> 
> > On Sun, Dec 2, 2012 at 8:05 AM, Robert Watson <rwat...@freebsd.org> wrote:
> > 
> > Just to follow up on this thread, since the question has come up a number 
> > of times.  "mergemaser -p" should be run prior to installworld always, but 
> > most of the time will do very little.  One of its responsibilities is to 
> > add any necessary accounts and groups depended on by base system components 
> > -- e.g., that will be referenced during installworld as part of setting 
> > file ownership and groups.
> > 
> > I often use "make installworld installkernel distribution DESTDIR=..." to 
> > create bootable images (e.g. for a USB stick).  What's the recommendation 
> > for that case?  Manually create the auditdistd user on the build host?
> 
> Yes, that's probably the best short-term bet.
> 
> In the longer term, it would be nice of installworld could not only generate 
> an mtree on the side rather than directly chmod/chowning the files (Brooks 
> Davis has patches for this), but also use UIDs/GIDs from a user database 
> directly rather than assuming that the host where you are constructing the 
> image has the same notion of users and groups. This is especially important 
> if we want to support cross-building embedded images from Linux, Mac OS X, 
> etc, in the future.
> 

One useful feature of NetBSD's install is that we can use passwd and
group databases other than the one in /.  You would obviously use this
when doing an unprivileged install, but you might also want to do it
for a privileged install as well which would fix this bootstrapping
problem.

-- Brooks

Attachment: pgpUbMFTNvAMt.pgp
Description: PGP signature

Reply via email to