Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Accounts for nix show up #856

Open
ahoneybun opened this issue Jan 2, 2025 · 6 comments
Open

Accounts for nix show up #856

ahoneybun opened this issue Jan 2, 2025 · 6 comments

Comments

@ahoneybun
Copy link

I don't believe I have seen this with GNOME so I feel like this is a bug as they do not list user ids under 1000 (first user). Here are the ID's for these users:

nixbld1:30001
nixbld2:30002
nixbld3:30003
nixbld4:30004
nixbld5:30005
nixbld6:30006
nixbld7:30007
nixbld8:30008
nixbld9:30009
nixbld10:30010
nixbld11:30011
nixbld12:30012
nixbld13:30013
nixbld14:30014
nixbld15:30015
nixbld16:30016
nixbld17:30017
nixbld18:30018
nixbld19:30019
nixbld20:30020
nixbld21:30021
nixbld22:30022
nixbld23:30023
nixbld24:30024
nixbld25:30025
nixbld26:30026
nixbld27:30027
nixbld28:30028
nixbld29:30029
nixbld30:30030
nixbld31:30031
nixbld32:30032

screenshot-2025-01-02-12-50-52

@mmstick
Copy link
Member

mmstick commented Jan 2, 2025

What's the UID_MIN/MAX and the path of the file configuring it?

@ahoneybun
Copy link
Author

That I do not know, they are created with the nix install script:

sh <(curl -L https://nixos.org/nix/install) --daemon

https://nixos.org/download/

@mmstick
Copy link
Member

mmstick commented Jan 2, 2025

On Pop!_OS, /etc/login.defs defines UID_MIN 1000 and UID_MAX 60000

@mmstick
Copy link
Member

mmstick commented Jan 2, 2025

I don't think system accounts assigned via the AccountsService are handled yet, if that's how these accounts are being configured.

@ids1024
Copy link
Member

ids1024 commented Jan 2, 2025

Gnome seems to check the SystemAccount property provided by accountservice.

If the account isn't explicitly configured as being a system account or not, it uses the heuristics in https://gitlab.freedesktop.org/accountsservice/accountsservice/-/blob/main/src/user-classify.c

@mainrs
Copy link

mainrs commented Jan 6, 2025

These accounts are used for building nix packages as non-root users. A normal user delegates work over to the nix-daemon which is in charge of using these accounts for building packages.

I think they always have to be named nixbld1, nixbld2, and so on. There is probably some way to change them, but the default setup of NixOS, nix, lix and nix-darwin all use the same username format.

It's probably safe to filter these out.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants