about summary refs log tree commit diff
path: root/nixos/doc
diff options
context:
space:
mode:
authorEelco Dolstra <eelco.dolstra@logicblox.com>2014-08-15 01:33:20 +0200
committerEelco Dolstra <eelco.dolstra@logicblox.com>2014-08-15 02:15:29 +0200
commit1a75958be52f5c2f062ace0935c1a2d43c8f7f55 (patch)
treef08f0dee72758b493ee4ebed88259578b032d6e9 /nixos/doc
parentdf7bc53606bd7576232e2fe25e404789b5a2389a (diff)
downloadnixlib-1a75958be52f5c2f062ace0935c1a2d43c8f7f55.tar
nixlib-1a75958be52f5c2f062ace0935c1a2d43c8f7f55.tar.gz
nixlib-1a75958be52f5c2f062ace0935c1a2d43c8f7f55.tar.bz2
nixlib-1a75958be52f5c2f062ace0935c1a2d43c8f7f55.tar.lz
nixlib-1a75958be52f5c2f062ace0935c1a2d43c8f7f55.tar.xz
nixlib-1a75958be52f5c2f062ace0935c1a2d43c8f7f55.tar.zst
nixlib-1a75958be52f5c2f062ace0935c1a2d43c8f7f55.zip
Unify mutableUsers = { true, false }
With mutableUsers = true, we now ensure that all users and groups that
were created declaratively, are updated or removed
appropriately. Thus, adding a user to users.extraUsers and then
removing it now causes the acoount to be removed from
/etc/passwd. Thus user/group management is fully congruent except that
users and groups that were created imperatively (via useradd/groupadd)
are not touched. We distinguish between declarative and imperative
users/groups by tracking the former in
/var/lib/nixos/declarative-{groups,users}.

With mutableUsers = false, you are now no longer required to specify
UIDs/GIDs for all users. The handling of mutableUsers = true/false is
the same code path; the only difference is that the "false" mode
ignores the existing contents of /etc/{passwd,group}.

The attribute ‘createUser’ is gone. It doesn't really make sense to
specify users that shouldn't be created.
Diffstat (limited to 'nixos/doc')
-rw-r--r--nixos/doc/manual/configuration.xml5
1 files changed, 0 insertions, 5 deletions
diff --git a/nixos/doc/manual/configuration.xml b/nixos/doc/manual/configuration.xml
index 051f0fb8c1e0..ce7ccf6cc5ec 100644
--- a/nixos/doc/manual/configuration.xml
+++ b/nixos/doc/manual/configuration.xml
@@ -1072,11 +1072,6 @@ users.extraGroups.students.gid = 1000;
 As with users, the group ID (gid) is optional and will be assigned
 automatically if it’s missing.</para>
 
-<warning><para>Currently declarative user management is not perfect:
-<command>nixos-rebuild</command> does not know how to realise certain
-configuration changes.  This includes removing a user or group, and
-removing group membership from a user.</para></warning>
-
 <para>In the imperative style, users and groups are managed by
 commands such as <command>useradd</command>,
 <command>groupmod</command> and so on.  For instance, to create a user