[Bug 1959375] Re: [SRU] Please support group manipulation with "extrausers"

[Alberto Mardegan]

** Description changed:

+ [Impact]
+ 
+ * In order to use the microk8s snap in Ubuntu Core, one currently needs
+ to be root. This is far from optimal, since normally (on desktop and
+ server installations) this is not necessary.
+ 
+ * This make it hard to provide consistent documentation on microk8s
+ across all supported device, if we have to take the "sudo" command into
+ account, and how file permissions for generated files might be affected.
+ 
+ 
+ [Test Plan]
+ 
+ The issue can be reproduced on Ubuntu Core 18, 20 and 22. The steps are
+ as following (replace "<uc.img>" with the actual path of your Ubuntu
+ Core image file:
+ 
+     qemu-system-x86_64 -enable-kvm -smp 2 -m 1500 \
+         -netdev user,id=mynet0,hostfwd=tcp::8022-:22,hostfwd=tcp::8090-:80 \
+         -device virtio-net-pci,netdev=mynet0 \
+         -drive file=<uc.img>,format=raw
+ 
+ <to be continued>
+ 
+ 
+ Original bug description
+ ========================
+ 
  Currently doing something like:
  
-     sudo usermod -a -G snap_microk8s dbeamonte
+     sudo usermod -a -G snap_microk8s dbeamonte
  
  on a Ubuntu Core system will fail with
  
-     usermod: /etc/group.15965: Read-only file system
+     usermod: /etc/group.15965: Read-only file system
  
  This is because the existing usermod patches to detect
  the extrausers file do not cover this case. Attached
  a simple patch that enables it. I will give this patch
  a test run in our image PPA for jammy and if things look
  good I would like upload to 22.04 and SRU for 20.04 and
  18.04.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shadow in Ubuntu.
https://bugs.launchpad.net/bugs/1959375

Title:
  [SRU] Please support group manipulation with "extrausers"

Status in shadow package in Ubuntu:
  New
Status in shadow source package in Bionic:
  New
Status in shadow source package in Focal:
  New
Status in shadow source package in Impish:
  Won't Fix
Status in shadow source package in Jammy:
  New

Bug description:
  [Impact]

  * In order to use the microk8s snap in Ubuntu Core, one currently
  needs to be root. This is far from optimal, since normally (on desktop
  and server installations) this is not necessary.

  * This make it hard to provide consistent documentation on microk8s
  across all supported device, if we have to take the "sudo" command
  into account, and how file permissions for generated files might be
  affected.

  
  [Test Plan]

  The issue can be reproduced on Ubuntu Core 18, 20 and 22. The steps
  are as following (replace "<uc.img>" with the actual path of your
  Ubuntu Core image file:

      qemu-system-x86_64 -enable-kvm -smp 2 -m 1500 \
          -netdev user,id=mynet0,hostfwd=tcp::8022-:22,hostfwd=tcp::8090-:80 \
          -device virtio-net-pci,netdev=mynet0 \
          -drive file=<uc.img>,format=raw

  <to be continued>

  
  Original bug description
  ========================

  Currently doing something like:

      sudo usermod -a -G snap_microk8s dbeamonte

  on a Ubuntu Core system will fail with

      usermod: /etc/group.15965: Read-only file system

  This is because the existing usermod patches to detect
  the extrausers file do not cover this case. Attached
  a simple patch that enables it. I will give this patch
  a test run in our image PPA for jammy and if things look
  good I would like upload to 22.04 and SRU for 20.04 and
  18.04.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1959375/+subscriptions