tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Unprivileged build user



Greg requested that bob use PKG_USERS to create an unprivileged builder user by default, which seems entirely reasonable.

I'd like to go one step further and settle on a standard unprivileged build user that bob, pbulk, and potentially others in the future can all use. pbulk has shipped this:

  # Account used for user-destdir builds. This account should have
  # no special permissions.
  #
  unprivileged_user=pbulk

in its default pbulk.conf for many years, without creating PKG_USERS, and so I expect others may be like me and currently re-use the pbulk user or similar that they've previously created for pbulk, for bob.

What I propose is that we add a standard:

  PKGBUILD_USER?=	pkgbuild
  PKGBUILD_GROUP?=	pkgbuild

to mk/defaults/mk.conf, and then update both pbulk and bob to use this for their default PKG_USERS/PKG_GROUPS.

I would then add a small bit of SUBST in bob to correctly populate this in the generated config.lua so that unprivileged builds work out of the box for new users. As an existing user I'd be happy to modify my existing host setups to match this.

Any particular grievances about this before I go ahead?

--
Jonathan Perkin                    pkgsrc.smartos.org
Open Source Complete Cloud   www.tritondatacenter.com


Home | Main Index | Thread Index | Old Index