yeah they do appear as they are not in /usr/etc

Ppythoner6 Eh but then should you be ending up with a new ostree deployment every time you ...

A

akdevOP•5/14/23, 2:48 AM

I'd be okay with that but there are some implications ...

A

akdevOP•5/14/23, 2:49 AM

but I would like it if

rm -rf /etc/*

rm -rf /etc/*

rm -rf /etc/*

rm -rf /etc/* does not destroy the system

A

akdevOP•5/14/23, 2:49 AM

conceptually that should reset the system to default state

Aakdev I'd be okay with that but there are some implications ...

P

pythoner6•5/14/23, 2:50 AM

Yeah, in a future where things are more image based "native" I could see something along those lines being the case

Aakdev yeah they do appear as they are not in /usr/etc

P

pythoner6•5/14/23, 2:53 AM

I do see a /usr/etc/passwd and /usr/etc/shadow etc, but there's no passwords for any accounts, so a little hard to log in if things got reset to that

(unless there's something that goes through the first boot setup again or something?)

A

akdevOP•5/14/23, 2:54 AM

pretty sure your system is bricked

A

akdevOP•5/14/23, 2:54 AM

if you remove them

R

ragectl•5/14/23, 2:54 AM

yeah those files under /usr are probably only there to fix file not found errors

A

akdevOP•5/14/23, 2:55 AM

there are actual defaults for these files, wonder why those aren't used

A

akdevOP•5/14/23, 2:56 AM

$ podman run --rm -it fedora-minimal:38                                                
bash-5.2# cat /etc/passwd
root❌0:0:Super User:/root:/bin/bash
bin❌1:1:bin:/bin:/usr/sbin/nologin
daemon❌2:2:daemon:/sbin:/usr/sbin/nologin
adm❌3:4:adm:/var/adm:/usr/sbin/nologin
lp❌4:7:lp:/var/spool/lpd:/usr/sbin/nologin
sync❌5:0:sync:/sbin:/bin/sync
shutdown❌6:0:shutdown:/sbin:/sbin/shutdown
halt❌7:0:halt:/sbin:/sbin/halt
mail❌8:12:mail:/var/spool/mail:/usr/sbin/nologin
operator❌11:0:operator:/root:/usr/sbin/nologin
games❌12💯games:/usr/games:/usr/sbin/nologin
ftp❌14:50:FTP User:/var/ftp:/usr/sbin/nologin
nobody❌65534:65534:Kernel Overflow User:/:/usr/sbin/nologin

$ podman run --rm -it fedora-minimal:38                                                
bash-5.2# cat /etc/passwd
root❌0:0:Super User:/root:/bin/bash
bin❌1:1:bin:/bin:/usr/sbin/nologin
daemon❌2:2:daemon:/sbin:/usr/sbin/nologin
adm❌3:4:adm:/var/adm:/usr/sbin/nologin
lp❌4:7:lp:/var/spool/lpd:/usr/sbin/nologin
sync❌5:0:sync:/sbin:/bin/sync
shutdown❌6:0:shutdown:/sbin:/sbin/shutdown
halt❌7:0:halt:/sbin:/sbin/halt
mail❌8:12:mail:/var/spool/mail:/usr/sbin/nologin
operator❌11:0:operator:/root:/usr/sbin/nologin
games❌12💯games:/usr/games:/usr/sbin/nologin
ftp❌14:50:FTP User:/var/ftp:/usr/sbin/nologin
nobody❌65534:65534:Kernel Overflow User:/:/usr/sbin/nologin

$ podman run --rm -it fedora-minimal:38                                                
bash-5.2# cat /etc/passwd
root❌0:0:Super User:/root:/bin/bash
bin❌1:1:bin:/bin:/usr/sbin/nologin
daemon❌2:2:daemon:/sbin:/usr/sbin/nologin
adm❌3:4:adm:/var/adm:/usr/sbin/nologin
lp❌4:7:lp:/var/spool/lpd:/usr/sbin/nologin
sync❌5:0:sync:/sbin:/bin/sync
shutdown❌6:0:shutdown:/sbin:/sbin/shutdown
halt❌7:0:halt:/sbin:/sbin/halt
mail❌8:12:mail:/var/spool/mail:/usr/sbin/nologin
operator❌11:0:operator:/root:/usr/sbin/nologin
games❌12💯games:/usr/games:/usr/sbin/nologin
ftp❌14:50:FTP User:/var/ftp:/usr/sbin/nologin
nobody❌65534:65534:Kernel Overflow User:/:/usr/sbin/nologin

$ podman run --rm -it fedora-minimal:38                                                
bash-5.2# cat /etc/passwd
root❌0:0:Super User:/root:/bin/bash
bin❌1:1:bin:/bin:/usr/sbin/nologin
daemon❌2:2:daemon:/sbin:/usr/sbin/nologin
adm❌3:4:adm:/var/adm:/usr/sbin/nologin
lp❌4:7:lp:/var/spool/lpd:/usr/sbin/nologin
sync❌5:0:sync:/sbin:/bin/sync
shutdown❌6:0:shutdown:/sbin:/sbin/shutdown
halt❌7:0:halt:/sbin:/sbin/halt
mail❌8:12:mail:/var/spool/mail:/usr/sbin/nologin
operator❌11:0:operator:/root:/usr/sbin/nologin
games❌12💯games:/usr/games:/usr/sbin/nologin
ftp❌14:50:FTP User:/var/ftp:/usr/sbin/nologin
nobody❌65534:65534:Kernel Overflow User:/:/usr/sbin/nologin

R

ragectl•5/14/23, 2:56 AM

I could see a future state where /etc/shadow /etc/group /etc/passwd actually become

.d

.d

.d

.d directories which get

include

include

include

include-d

A

akdevOP•5/14/23, 2:56 AM

that cannot happen, it breaks POSIX

A

akdevOP•5/14/23, 2:56 AM

systemd has some sysusers thing tho

R

ragectl•5/14/23, 2:57 AM

not everything sticks to POSIX

A

akdevOP•5/14/23, 2:57 AM

the last 45 years or so of tooling assume that all your users are in /etc/passwd

A

akdevOP•5/14/23, 2:57 AM

this convention probably even predates POSIX

A

akdevOP•5/14/23, 2:58 AM

there's realistically no way we're going to change that imo

A

akdevOP•5/14/23, 2:58 AM

that's why even /etc/fstab doesn't change even though now it is used by systemd to generate mount units

R

ragectl•5/14/23, 2:58 AM

and they write things like SSSD that tells it to find users in places that are not /etc/passwd etc

R

ragectl•5/14/23, 2:58 AM

¯\_(ツ)_/¯

A

akdevOP•5/14/23, 2:59 AM

that's for networked authentication and SSSD has an option to keep /etc/passwd in sync

R

ragectl•5/14/23, 2:59 AM

I believe one of the changes that RHEL was considering for their Identity Management was actually removing reference to

files

files

files

files so it doesn't even look locally for user auth

Aakdev ``` $ podman run --rm -it fedora-minimal:38 ...

A

Arcitec•5/14/23, 3:00 AM

Pff everyone's passwords are

Back in my day, all passwords were stored plaintext, with the only protection being the root read permissions on the file.

A

Arcitec•5/14/23, 3:02 AM

It definitely helped people who forgot their passwords.

J

j0rge•5/14/23, 3:55 AM

@hermmm heya I noticed the PR permission thing you mentioned here: https://github.com/ublue-os/startingpoint/pull/74 and looked to see if there was a setting but couldn't find one

J

j0rge•5/14/23, 3:57 AM

also noticed the github settings on startingpoint were still different from the others so I turned on needing approval for all PRs but also turned on the option for people to automerge when the approver says yes. Theoretically that should remove one round trip timezone wise.

J

j0rge•5/14/23, 3:58 AM

But also noticed we weren't enforcing tests to pass so I turned those on, so we'll have to see what explodes but probably nothing.

N

Noah•5/14/23, 5:21 AM

@j0rge where would i put an issue for this: https://discord.com/channels/232740312194351106/625653468262039563/1107168355993002025

N

Noah•5/14/23, 5:31 AM

I just put it in startingpoint since that is what i was using

R

ragectl•5/14/23, 1:55 PM

I think I want to make an image with wezterm built in to it haha

R

ragectl•5/14/23, 1:55 PM

it's a pity helix editor isn't packaged in an official rpm

NNoah I just put it in startingpoint since that is what i was using

A

Arcitec•5/14/23, 2:04 PM

Here is the link to your ticket, for anyone reading:

https://github.com/ublue-os/startingpoint/issues/75

GitHub

`Operation not permitted` when cleaning deployments · Issue #75 · u...

$ rpm-ostree upgrade note: automatic updates (stage) are enabled Pulling manifest: ostree-unverified-image:docker://ghcr.io/noahdotpy/myublue-gnome:latest Staging deployment... done error: Cleaning...

A

Arcitec•5/14/23, 2:05 PM

This doesn't appear to be any issue caused by uBlue. Have you tried googling that error message? Other ostree users may have encountered it.

Rragectl I think I want to make an image with wezterm built in to it haha

A

Arcitec•5/14/23, 2:10 PM

Making custom images is very easy. I could guide you through it. But I thought wezterm was already on Flathub...

The link is https://flathub.org/apps/org.wezfurlong.wezterm

Flathub

Wez's Terminal Emulator | Flathub

A GPU-accelerated cross-platform terminal emulator and multiplexer

A

Arcitec•5/14/23, 2:13 PM

@hermmm Were you watching Eurovision yesterday in the tub? I heard Sweden beat Finland. beagle_love

A

Arcitec•5/14/23, 2:14 PM

Finland's song was really funny though. It should have won.

Rragectl it's a pity helix editor isn't packaged in an official rpm

A

Arcitec•5/14/23, 2:16 PM

You can make a distrobox with Arch, install it from AUR and then export it to the host.

AArcitec @hermmm Were you watching Eurovision yesterday in the tub? I heard Sweden beat F...

X

xyny•5/14/23, 2:41 PM

Yeah. I read on reddit that we got 84% of the popular vote though, so I'm just sayin fuck the jury and we won.

X

xyny•5/14/23, 2:42 PM

It's a shame Loreen got a win a second time with a much worse song.

X

xyny•5/14/23, 2:42 PM

Ig they want Eurovision in Sweden next year as it's also Abba's 50 year anniversary.

AArcitec You can make a distrobox with Arch, install it from AUR and then export it to th...

R

ragectl•5/14/23, 2:46 PM

I think I saw @j0rge do that in one of his videos

AArcitec Making custom images is very easy. I could guide you through it. But I thought w...

R

ragectl•5/14/23, 2:48 PM

it's on there, but the website will tell you it's only intended for people to have a first loo, because it doesn't allow some of the configuration

R

ragectl•5/14/23, 2:48 PM

https://wezfurlong.org/wezterm/install/linux.html#installing-on-linux-via-flathub

Linux - Wez's Terminal Emulator

Wez's Terminal Emulator

R

ragectl•5/14/23, 2:49 PM

See the note on that section

R

ragectl•5/14/23, 2:49 PM

The flatpak is provided primarily for ease of trying out wezterm with low commitment, and you are encouraged to use native packages for your system once you're ready to get the most out of wezterm.

Xxyny Yeah. I read on reddit that we got 84% of the popular vote though, so I'm just s...

A

Arcitec•5/14/23, 2:49 PM

I agree, Loreen's song is the typical bland modern pop stuff. Your song was hilarious. And it won the people's vote.

Rragectl > The flatpak is provided primarily for ease of trying out wezterm with low comm...

A

Arcitec•5/14/23, 2:50 PM

Oh okay, but perhaps they're talking about some rare functionality that you aren't using. Try it and see if it works.

Terminals on Flathub are no big problem; they just need to be aware of Flatpak env and call

flatpak-spawn --host <name of shell binary>

flatpak-spawn --host <name of shell binary>

flatpak-spawn --host <name of shell binary>

flatpak-spawn --host <name of shell binary> to spawn a shell that runs entirely unsandboxed. While the terminal GUI itself is sandboxed. So most terminals work perfectly in Flathub. If you really need it natively then I can help you get started with making a custom uBlue OS.

R

ragectl•5/14/23, 2:55 PM

Wez does build rpms for each release hosted on GitHub, so I could just cheat by layering it. But since I am considering a build for work focused use with some other things, it wouldn't hurt to include Wezterm

R

ragectl•5/14/23, 2:56 PM

I asked about the packages on Matrix and a few minutes later he'd replaced Fedora35 with Fedora38

Rragectl Wez does build rpms for each release hosted on GitHub, so I could just cheat by ...

A

Arcitec•5/14/23, 2:59 PM

If you're interested, GitHub (Microsoft) will build your OS images daily according to your specification and host it for free on the same container registry that uBlue uses. It involves forking https://github.com/ublue-os/startingpoint on GitHub, ~~then set https://github.com/Arcitec/os/tree/firstboot-refactor as an extra remote and pull all of its changes (they'll be in the main repo later but for now you gotta do it manually).~~ Edit: Those changes are merged so you only need the main repo now.

After you have that, I suggest creating a new branch called something unique, like

rage-os

rage-os

rage-os

rage-os, set that as your main branch in GitHub's repo settings.

Now just start editing

recipe.yml

recipe.yml

recipe.yml

recipe.yml to list the packages you want to include/exclude, and editing

yafti.yml

yafti.yml

yafti.yml

yafti.yml to configure your own "on-login package installer".