[Bug 2073776] Re: cockpit-ws 321-1~bpo22.04.1 changes user to cockpit-wsinstance but systemd units still use cockpit-ws as the username

[Martin Pitt]

Hmm.. Installing libnss-systemd is supposed to add that line
automatically. Do you remember, did you happen to change nsswitch.cnf
manually somehow? backup/restore, Ansible, etc?

** Summary changed:

- cockpit-ws 321-1~bpo22.04.1 changes user to cockpit-wsinstance but systemd units still use cockpit-ws as the username
+ nsswitch.conf "passwd" entry misses "systemd", breaking DynamicUser=yes systemd units

** Package changed: cockpit (Ubuntu) => systemd (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/2073776

Title:
  nsswitch.conf "passwd" entry misses "systemd", breaking
  DynamicUser=yes systemd units

Status in systemd package in Ubuntu:
  Incomplete

Bug description:
  The 321-1~bpo22.04.1 version of cockpit-ws calls the cockpit user "cockpit-wsinstance":
  $ cat usr/lib/sysusers.d/cockpit-wsinstance.conf
  u cockpit-wsinstance - "User for cockpit-ws instances" -

  However the following systemd files still reference the old "cockpit-ws" username, so the service fails to start:
  $ grep -r cockpit-ws$ lib/systemd/system
  lib/systemd/system/cockpit-ws-user.service:Description=Dynamic user for cockpit-ws
  lib/systemd/system/cockpit-ws-user.service:User=cockpit-ws
  lib/systemd/system/cockpit-ws-user.service:Group=cockpit-ws
  lib/systemd/system/cockpit-wsinstance-https at .socket:SocketUser=cockpit-ws
  lib/systemd/system/cockpit-wsinstance-https-factory.socket:SocketUser=cockpit-ws
  lib/systemd/system/cockpit.service:User=cockpit-ws
  lib/systemd/system/cockpit.service:Group=cockpit-ws
  lib/systemd/system/cockpit-wsinstance-http.socket:SocketUser=cockpit-ws

  Can these systemd files be updated to use the new username? Thanks!

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2073776/+subscriptions