On Sun, Dec 02, 2012 at 03:43:22PM +0000, Robert N. M. Watson wrote: > > On 2 Dec 2012, at 15:34, Ryan Stone wrote: > > > On Sun, Dec 2, 2012 at 8:05 AM, Robert Watson <rwat...@freebsd.org> wrote: > > > > Just to follow up on this thread, since the question has come up a number > > of times. "mergemaser -p" should be run prior to installworld always, but > > most of the time will do very little. One of its responsibilities is to > > add any necessary accounts and groups depended on by base system components > > -- e.g., that will be referenced during installworld as part of setting > > file ownership and groups. > > > > I often use "make installworld installkernel distribution DESTDIR=..." to > > create bootable images (e.g. for a USB stick). What's the recommendation > > for that case? Manually create the auditdistd user on the build host? > > Yes, that's probably the best short-term bet. > > In the longer term, it would be nice of installworld could not only generate > an mtree on the side rather than directly chmod/chowning the files (Brooks > Davis has patches for this), but also use UIDs/GIDs from a user database > directly rather than assuming that the host where you are constructing the > image has the same notion of users and groups. This is especially important > if we want to support cross-building embedded images from Linux, Mac OS X, > etc, in the future. >
One useful feature of NetBSD's install is that we can use passwd and group databases other than the one in /. You would obviously use this when doing an unprivileged install, but you might also want to do it for a privileged install as well which would fix this bootstrapping problem. -- Brooks
pgpUbMFTNvAMt.pgp
Description: PGP signature