JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
bba7fb62e8
nixpkgs/nixos/modules/misc/ids.nix

222 lines
4.3 KiB
Nix
Raw Normal View History

* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
# This module defines the global list of uids and gids. We keep a
Fix typos, especially those that end up in the NixOS manual
2013-08-10 22:07:13 +01:00
# central list to prevent id collisions.
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
{ config, pkgs, ... }:
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
{
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
options = {
ids.uids = pkgs.lib.mkOption {
Add lots of missing option types
2013-10-30 16:37:45 +00:00
internal = true;
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
description = ''
The user IDs used in NixOS.
'';
};
ids.gids = pkgs.lib.mkOption {
Add lots of missing option types
2013-10-30 16:37:45 +00:00
internal = true;
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
description = ''
The group IDs used in NixOS.
'';
};
};
strip trailing whitespace; no functional change svn path=/nixos/trunk/; revision=29285
2011-09-14 19:20:50 +01:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
config = {
* Declarative specification of user accounts. Jobs can now specify a list of user accounts that the job needs to run. For instance, the SSH daemon job says: { name = "sshd"; uid = (import ../system/ids.nix).uids.sshd; description = "SSH privilege separation user"; home = "/var/empty"; } The activation script creates the system users/groups and updates them as well. So a change in the Nix expression can be realised in /etc/{group,passwd} by running nixos-rebuild. svn path=/nixos/trunk/; revision=8846
2007-06-08 16:41:12 +01:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
ids.uids = {
root = 0;
nscd = 1;
sshd = 2;
ntp = 3;
messagebus = 4; # D-Bus
haldaemon = 5;
nagios = 6;
vsftpd = 7;
ftp = 8;
bitlbee = 9;
avahi = 10;
atd = 12;
zabbix = 13;
postfix = 14;
dovecot = 15;
tomcat = 16;
pulseaudio = 22; # must match `pulseaudio' GID
gpsd = 23;
polkituser = 28;
uptimed = 29;
ddclient = 30;
davfs2 = 31;
privoxy = 32;
osgi = 34;
tor = 35;
cups = 36;
foldingAtHome = 37;
sabnzbd = 38;
kdm = 39;
ghostOne = 40;
git = 41;
fourStore = 42;
fourStoreEndpoint = 43;
virtuoso = 44;
rtkit = 45;
dovecot2 = 46;
dovenull2 = 47;
unbound = 48;
prayer = 49;
mpd = 50;
clamav = 51;
fprot = 52;
bind = 53;
wwwrun = 54;
spamd = 56;
nslcd = 58;
nginx = 60;
chrony = 61;
smtpd = 63;
smtpq = 64;
supybot = 65;
iodined = 66;
graphite = 68;
statsd = 69;
transmission = 70;
postgres = 71;
smbguest = 74;
varnish = 75;
dd-agent = 76;
lighttpd = 77;
lightdm = 78;
freenet = 79;
ircd = 80;
bacula = 81;
almir = 82;
deluge = 83;
mysql = 84;
rabbitmq = 85;
activemq = 86;
gnunet = 87;
oidentd = 88;
quassel = 89;
amule = 90;
minidlna = 91;
elasticsearch = 92;
modules/misc/ids.nix: document the fact that the uid for tcpcryptd is hard-coded in the daemon
2013-09-17 10:22:31 +01:00
tcpcryptd = 93; # tcpcryptd uses a hard-coded uid. We patch it in Nixpkgs to match this choice.
zope2 service (plone)
2013-10-02 14:14:35 +01:00
zope2 = 94;
firebird service many suggestions contributed by bjornfor and edolstra
2013-10-05 22:07:22 +01:00
firebird = 95;
nixos/redis: user set uid, make it compatible #1076
2013-10-28 17:14:01 +00:00
redis = 96;
nixos: haproxy module
2013-10-29 14:55:25 +00:00
haproxy = 97;
nixos/mongodb: set static uid to work with #1076
2013-11-07 10:25:14 +00:00
mongodb = 98;
Added openldap user, group and configure service so its not running as root.
2013-11-28 21:21:50 +00:00
openldap = 99;
memcached: set uid to make it work with #1076
2013-12-13 09:05:36 +00:00
memcached = 100;
nixos/cgminer: fix restarts, set uid
2014-01-12 23:18:05 +00:00
cgminer = 101;
nixos: add uid/gid for munin To be compatible with eb2f44c18cb6d300e965308547d8a4dea110f519 (Generate /etc/passwd and /etc/group at build time). Without this you'll get this: $ nixos-rebuild build [...] user-thrown exception: The option `users.extraGroups.unnamed-9.1.gid' is used but not defined.
2014-02-07 22:08:15 +00:00
munin = 102;
nixos: add uid for logcheck and only create a user for the default user
2014-02-11 13:19:06 +00:00
logcheck = 103;
Add module to enable the server for the ssh substituter
2014-02-20 17:34:54 +00:00
nix-ssh = 104;
nixos: Assign uid/gid to dictd's service user.
2014-02-21 11:40:05 +00:00
dictd = 105;
couchdb: add ids
2014-02-27 13:33:30 +00:00
couchdb = 106;
4Store SPARQL endpoint: packaged svn path=/nixos/trunk/; revision=26853
2011-04-15 17:10:17 +01:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
# When adding a uid, make sure it doesn't match an existing gid.
Add support for the Avahi daemon. The daemon starts correctly but, for some reason, clients fail to connect to it. svn path=/nixos/trunk/; revision=10999
2008-03-06 17:11:22 +00:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
nixbld = 30000; # start of range of uids
nobody = 65534;
};
ids.gids = {
root = 0;
wheel = 1;
kmem = 2;
tty = 3;
messagebus = 4; # D-Bus
haldaemon = 5;
disk = 6;
vsftpd = 7;
ftp = 8;
bitlbee = 9;
avahi = 10;
atd = 12;
postfix = 13;
postdrop = 14;
dovecot = 15;
audio = 17;
floppy = 18;
uucp = 19;
lp = 20;
tomcat = 21;
pulseaudio = 22; # must match `pulseaudio' UID
gpsd = 23;
cdrom = 24;
tape = 25;
video = 26;
dialout = 27;
polkit: major update 0.105 -> 0.112 - It now uses JavaScript for configuration (only), so I had to "convert" config for NetworkManager. - I tested suspend/restart/(un)mount on KDE/Xfce, Phreedom tested NetworkManager config conversion.
2013-11-09 15:29:18 +00:00
#polkituser = 28; # currently unused, polkitd doesn't need a group
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
utmp = 29;
davfs2 = 31;
privoxy = 32;
disnix = 33;
osgi = 34;
ghostOne = 40;
git = 41;
fourStore = 42;
fourStoreEndpoint = 43;
virtuoso = 44;
dovecot2 = 46;
prayer = 49;
mpd = 50;
clamav = 51;
fprot = 52;
wwwrun = 54;
adm = 55;
spamd = 56;
networkmanager = 57;
nslcd = 58;
scanner = 59;
nginx = 60;
systemd-journal = 62;
smtpd = 63;
smtpq = 64;
supybot = 65;
iodined = 66;
libvirtd = 67;
graphite = 68;
transmission = 70;
postgres = 71;
vboxusers = 72;
vboxsf = 73;
smbguest = 74;
varnish = 75;
dd-agent = 76;
lighttpd = 77;
lightdm = 78;
freenet = 79;
ircd = 80;
bacula = 81;
almir = 82;
deluge = 83;
mysql = 84;
rabbitmq = 85;
activemq = 86;
gnunet = 87;
oidentd = 88;
quassel = 89;
amule = 90;
minidlna = 91;
nixos: haproxy module
2013-10-29 14:55:25 +00:00
haproxy = 92;
Added openldap user, group and configure service so its not running as root.
2013-11-28 21:21:50 +00:00
openldap = 93;
connman: new packages ConnMan v1.20 and connman-ui
2014-01-04 00:13:26 +00:00
connman = 94;
nixos: add uid/gid for munin To be compatible with eb2f44c18cb6d300e965308547d8a4dea110f519 (Generate /etc/passwd and /etc/group at build time). Without this you'll get this: $ nixos-rebuild build [...] user-thrown exception: The option `users.extraGroups.unnamed-9.1.gid' is used but not defined.
2014-02-07 22:08:15 +00:00
munin = 95;
Add a keys group with read access to /run/keys This allows processes running as unprivileged users access to keys they might need
2014-02-11 12:00:10 +00:00
keys = 96;
nixos: Assign uid/gid to dictd's service user.
2014-02-21 11:40:05 +00:00
dictd = 105;
couchdb: add ids
2014-02-27 13:33:30 +00:00
couchdb = 106;
* Declarative specification of user accounts. Jobs can now specify a list of user accounts that the job needs to run. For instance, the SSH daemon job says: { name = "sshd"; uid = (import ../system/ids.nix).uids.sshd; description = "SSH privilege separation user"; home = "/var/empty"; } The activation script creates the system users/groups and updates them as well. So a change in the Nix expression can be realised in /etc/{group,passwd} by running nixos-rebuild. svn path=/nixos/trunk/; revision=8846
2007-06-08 16:41:12 +01:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
# When adding a gid, make sure it doesn't match an existing uid.
4Store SPARQL endpoint: packaged svn path=/nixos/trunk/; revision=26853
2011-04-15 17:10:17 +01:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
users = 100;
nixbld = 30000;
nogroup = 65534;
};
* Add some groups required by the latest udev. svn path=/nixos/trunk/; revision=16667
2009-08-11 10:17:30 +01:00
* Declarative specification of user accounts. Jobs can now specify a list of user accounts that the job needs to run. For instance, the SSH daemon job says: { name = "sshd"; uid = (import ../system/ids.nix).uids.sshd; description = "SSH privilege separation user"; home = "/var/empty"; } The activation script creates the system users/groups and updates them as well. So a change in the Nix expression can be realised in /etc/{group,passwd} by running nixos-rebuild. svn path=/nixos/trunk/; revision=8846
2007-06-08 16:41:12 +01:00
};
}
Reference in New Issue Copy Permalink