<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugzilla.yoctoproject.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.6"
          urlbase="https://bugzilla.yoctoproject.org/"
          
          maintainer="it-coreprojects-helpdesk@linuxfoundation.org"
>

    <bug>
          <bug_id>14139</bug_id>
          
          <creation_ts>2020-12-01 11:47:26 +0000</creation_ts>
          <short_desc>systemd user/groups different on opkg vs rpm images</short_desc>
          <delta_ts>2026-10-29 15:28:13 +0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>7</classification_id>
          <classification>Build System, Metadata &amp; Runtime</classification>
          <product>OE-Core</product>
          <component>core</component>
          <version>3.4</version>
          <rep_platform>x86</rep_platform>
          <op_sys>Multiple</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>Medium+</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>6.2 M1</target_milestone>
          
          <blocked>14137</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Ross Burton">ross.burton</reporter>
          <assigned_to name="Unassigned">unassigned</assigned_to>
          <cc>hongxu.jia</cc>
    
    <cc>liezhi.yang</cc>
    
    <cc>louis.rannou</cc>
    
    <cc>meta.mr.watcher</cc>
    
    <cc>meta.watcher</cc>
    
    <cc>paul</cc>
    
    <cc>randy.macleod</cc>
    
    <cc>ross.burton</cc>
    
    <cc>tgamblin</cc>
    
    <cc>tim.orling</cc>
          
          
          <cf_os>---</cf_os>
          <cf_regression_type>---</cf_regression_type>
          
          <cf_docchange>No (bug/feature does not impact docs)</cf_docchange>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>88696</commentid>
    <comment_count>0</comment_count>
    <who name="Ross Burton">ross.burton</who>
    <bug_when>2020-12-01 11:47:26 +0000</bug_when>
    <thetext>If you build core-image-minimal with both rpms and opks and compare the images, there are some curious differences:

│ ├── ./etc/gshadow
│ │ @@ -39,10 +39,10 @@
│ │  games:*::
│ │  shutdown:*::
│ │  users:*::
│ │  systemd-bus-proxy:!::
│ │  systemd-timesync:!::
│ │  systemd-resolve:!::
│ │  systemd-network:!::
│ │ -systemd-journal:x::
│ │ +systemd-journal:!::
│ │  messagebus:!::
│ │  nogroup:*::
│ ├── ./etc/shadow
│ │ @@ -11,13 +11,13 @@
│ │  uucp:*::0:99999:7:::
│ │  proxy:*::0:99999:7:::
│ │  www-data:*::0:99999:7:::
│ │  backup:*::0:99999:7:::
│ │  list:*::0:99999:7:::
│ │  irc:*::0:99999:7:::
│ │  gnats:*::0:99999:7:::
│ │ -systemd-bus-proxy:!::0:99999:7:::
│ │ -systemd-timesync:!::0:99999:7:::
│ │ -systemd-resolve:!::0:99999:7:::
│ │ -systemd-network:!::0:99999:7:::
│ │ -messagebus:!::0:99999:7:::
│ │ +systemd-bus-proxy:!:::::::
│ │ +systemd-timesync:!:::::::
│ │ +systemd-resolve:!:::::::
│ │ +systemd-network:!:::::::
│ │ +messagebus:!:::::::
│ │  nobody:*::0:99999:7:::

These files should be identical.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>88698</commentid>
    <comment_count>1</comment_count>
    <who name="Ross Burton">ross.burton</who>
    <bug_when>2020-12-01 12:11:15 +0000</bug_when>
    <thetext>There&apos;s a pattern:

RPM has:

systemd-journal:!::

systemd-bus-proxy:!:::::::
systemd-timesync:!:::::::
systemd-resolve:!:::::::
systemd-network:!:::::::
messagebus:!:::::::

OPKG and DPKG have:

systemd-journal:x::
systemd-bus-proxy:!::0:99999:7:::
systemd-timesync:!::0:99999:7:::
systemd-resolve:!::0:99999:7:::
systemd-network:!::0:99999:7:::
messagebus:!::0:99999:7:::</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>88712</commentid>
    <comment_count>2</comment_count>
    <who name="Ross Burton">ross.burton</who>
    <bug_when>2020-12-03 15:41:14 +0000</bug_when>
    <thetext>My guess is that this is somewhere deep in the rootfs generation, and is not specific to systemd.  My test image was core-image-minimal which doesn&apos;t have many users in the image.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>95655</commentid>
    <comment_count>3</comment_count>
    <who name="Louis Rannou">louis.rannou</who>
    <bug_when>2023-06-08 14:08:56 +0000</bug_when>
    <thetext>According to the useradd manual, system users should have no aging information (0 is the minimum password age, 99999 the maximum and 7 the warning period).

In that way, it does mean the rpm is more correct than the ipk.

But if you look at the whole file (not only the diff), it appears that most of system users contain aging information in both ipk and rpm.

It looks like it really depends on the distribution. On my personal archlinux, there is no aging information in /etc/shadow. On my debian/ubuntu containers, there are when I install a package such as avahi-daemon. There are none if I run the useradd command manually. I haven&apos;t tried on Fedora.

So far, I looked at the rpm and ipk packages and I found no difference in the the install scripts. They both call the useradd command with the PSEUDO prefix. I did not find any relevant difference in the recipe-sysroot-native.

I suspect something hidden occurs inside ipk/deb packages.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>95656</commentid>
    <comment_count>4</comment_count>
    <who name="Louis Rannou">louis.rannou</who>
    <bug_when>2023-06-08 14:18:14 +0000</bug_when>
    <thetext>I think we can make the relations below:

1. Packages defined in base-passwd =&gt; have aging information (no difference between ipk and rpm)

2. Normal packages created with useradd through the class useradd =&gt; have aging information (expected behavior)

3. System packages created with useradd through the class useradd (with option --system):
  rpm:  no aging information
  ipk:  have aging information</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>96077</commentid>
    <comment_count>5</comment_count>
    <who name="Randy MacLeod">randy.macleod</who>
    <bug_when>2023-07-26 21:22:02 +0000</bug_when>
    <thetext>Bulk move of 64 bugs to 4.3 M3 after a quick review.
If a bug is actually fixed, please add a commit link and resolve it.
-- Randy for YP bug team.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>96468</commentid>
    <comment_count>6</comment_count>
    <who name="Trevor Gamblin">tgamblin</who>
    <bug_when>2023-09-14 16:37:22 +0000</bug_when>
    <thetext>Moved to M4.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>97073</commentid>
    <comment_count>7</comment_count>
    <who name="Randy MacLeod">randy.macleod</who>
    <bug_when>2023-10-30 15:29:12 +0000</bug_when>
    <thetext>Bulk move to 5.0 M1. -- Randy</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>97675</commentid>
    <comment_count>8</comment_count>
    <who name="Randy MacLeod">randy.macleod</who>
    <bug_when>2023-12-21 23:28:29 +0000</bug_when>
    <thetext>Bulk move of 52 5.0-M1 bugs to M2.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>97995</commentid>
    <comment_count>9</comment_count>
    <who name="Randy MacLeod">randy.macleod</who>
    <bug_when>2024-01-25 14:28:46 +0000</bug_when>
    <thetext>Bulk move of bugs owned by &quot;unassigned&quot; from 5.0-M2 to 5.0-M3.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>98299</commentid>
    <comment_count>10</comment_count>
    <who name="Randy MacLeod">randy.macleod</who>
    <bug_when>2024-02-22 19:53:22 +0000</bug_when>
    <thetext>Bulk move of bugs from 5.0-M3 to 5.99.
The bugs in this list are all unassigned and are ones that I consider to be nice to do some time but not essential track from milestone to milestone in 5.0 or 5.1. We agreed on this bug handling approach in the YP bug review on Feb 22, 2024.

If you disagree, please move back to a 5.[012...]-M* milestone.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>105239</commentid>
    <comment_count>11</comment_count>
    <who name="Randy MacLeod">randy.macleod</who>
    <bug_when>2026-04-23 15:30:19 +0000</bug_when>
    <thetext>Ross will check if it&apos;s still happening on master.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>105241</commentid>
    <comment_count>12</comment_count>
    <who name="Ross Burton">ross.burton</who>
    <bug_when>2026-04-23 16:34:08 +0000</bug_when>
    <thetext>Confirmed with almost-6.0.

deb and ipkg generate /etc/shadow lines that look like this for systemd:

systemd-network:!:15069:0:99999:7:::

whereas rpm generates:

systemd-network:!:15069::::::</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>105260</commentid>
    <comment_count>13</comment_count>
    <who name="Ross Burton">ross.burton</who>
    <bug_when>2026-04-24 16:14:47 +0000</bug_when>
    <thetext>So the difference is that when useradd runs, rpm images have /etc/shadow but ipk/deb images do not.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>105261</commentid>
    <comment_count>14</comment_count>
    <who name="Ross Burton">ross.burton</who>
    <bug_when>2026-04-24 16:56:43 +0000</bug_when>
    <thetext>/etc/shadow is created by the shadow package&apos;s postinst calling pwconf. With RPM builds this happens quite early, but it does not happen before other packages using useradd with ipk.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>