Unprivileged build user

Jonathan Perkin <[email protected]>
Newsgroups gmane.os.netbsd.devel.packages
Message-ID <[email protected]>
Greg requested that bob use PKG_USERS to create an unprivileged builder 
user by default, which seems entirely reasonable.

I'd like to go one step further and settle on a standard unprivileged 
build user that bob, pbulk, and potentially others in the future can 
all use.  pbulk has shipped this:

   # Account used for user-destdir builds. This account should have
   # no special permissions.
   #
   unprivileged_user=pbulk

in its default pbulk.conf for many years, without creating PKG_USERS, 
and so I expect others may be like me and currently re-use the pbulk 
user or similar that they've previously created for pbulk, for bob.

What I propose is that we add a standard:

   PKGBUILD_USER?=	pkgbuild
   PKGBUILD_GROUP?=	pkgbuild

to mk/defaults/mk.conf, and then update both pbulk and bob to use this 
for their default PKG_USERS/PKG_GROUPS.

I would then add a small bit of SUBST in bob to correctly populate this 
in the generated config.lua so that unprivileged builds work out of the 
box for new users.  As an existing user I'd be happy to modify my 
existing host setups to match this.

Any particular grievances about this before I go ahead?

-- 
Jonathan Perkin                    pkgsrc.smartos.org
Open Source Complete Cloud   www.tritondatacenter.com
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.