On Sat, Jan 28, 2017 at 8:56 PM, Michael Orlitzky <m...@gentoo.org> wrote: > On 01/27/2017 11:21 PM, Rich Freeman wrote: >> >> It isn't like inconsistent UIDs are the end of the world. However, >> IMO it still makes sense to at least try to standardize such things. >> Really, if you have a package always installing the same user simply >> sticking a default UID without any effort to avoid collisions is >> better than nothing, but having a wiki page where people can register >> UIDs isn't that big a deal. >> > > Here's a problem I have no solution for. Suppose we tell everyone to > pick a fixed UID for their user packages. I have a randomly assigned > "tcpdump" user as UID 102 on my machine today. If we roll this out next > week and the tcpdump maintainer chooses UID=321 as his fixed UID, what > happens when I go to install sys-user/tcpdump? Every option is bad: > > * Keep the existing user. Now its UID is wrong. You might say "so > what," but the majority of users on the majority of systems are > going to have this problem, so you have to wonder what we've > gained by deciding on fixed UIDs and then ultimately assigning > them randomly anyway.
Honestly, I really will say "so what" here. :) Sure, it isn't a perfect solution, but it costs you nothing, and the fallback is just random UIDs, which as we've already established aren't a huge problem. For new installs things will be more consistent. It is of course possible to remap UIDs, but I don't think we should ever try to do this automatically, because only the user can know if every filesystem that might contain the old UIDs is actually mounted, or if they mind find killing their drives at the moment, or if anything important is running under the old uid. I'm sure somebody will end up offering up a script at some point that will remap an existing Gentoo install in single user mode to the new defaults if somebody wishes to do so. The bottom line is that I think at least picking some defaults is going to result in a typical new install having matching uids, which is going to make life easier for small-scale multi-host setups (NFS, containers, etc). No, it will never work at the enterprise scale (for starters, other distros will probably come into play), and it doesn't matter for a standalone box. However, just putting a stick in the mud will give 95% of the benefit for zero additional work. And the fallback to random IDs is already implemented anyway. So, don't try to fix the decades-old boxes. By now everybody who has them has beards gray enough to deal with any issues, and they'll have to have been dealing with them all along anyway. -- Rich
