From 8c3503d6f6dd6972f4d8566a14532f0dcb446851 Mon Sep 17 00:00:00 2001 From: Jörg Thalheim Date: Sun, 20 May 2018 10:52:03 +0100 Subject: nixos/ids: information when to use static uids/gids --- nixos/modules/misc/ids.nix | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'nixos/modules') diff --git a/nixos/modules/misc/ids.nix b/nixos/modules/misc/ids.nix index cc7d86849824..bb97c707bf65 100644 --- a/nixos/modules/misc/ids.nix +++ b/nixos/modules/misc/ids.nix @@ -1,6 +1,14 @@ # This module defines the global list of uids and gids. We keep a # central list to prevent id collisions. +# IMPORTANT! +# We only add static uids and gids for services where it is not feasible +# to change uids/gids on service start, in example a service with a lot of +# files. Please also check if the service is applicable for systemd's +# DynamicUser option and does not need a uid/gid allocation at all. +# Systemd can also change ownership of service directories using the +# RuntimeDirectory/StateDirectory options. + { config, pkgs, lib, ... }: { -- cgit 1.4.1