Skip to contentSkip to conversation

normal user for Intel BSPs?

DISCUSSION jfabernathy 3 participants 4 messages Jan 25, 2012

lore
Share & tools
lore
#0 lore raw

I've noticed that the meta-intel BSP come up with the default terminal, serial console user, etc. as root. What would it take to make my own BSP that was exactly the same, but the default was a not admin user, but you could su or sudo to root?

Jim A

#1 lore raw
Quoted 4 lines · jfabernathy

I've noticed that the meta-intel BSP come up with the default terminal, serial console user, etc. as root. What would it take to make my own BSP that was exactly the same, but the default was a not admin user, but you could su or sudo to root?

I'm adding Scott G. who I believe has been working on the useradd scripts and such (to sanity check the following). I believe you should be able to setup new users by extending an image recipe with a new task to make the necessary useradd/mod etc calls on the rootfs prior to packaging it up.

Scott, can you offer more detail on how that is done?

Signature · 3 lines
Darren Hart
Intel Open Source Technology Center
Yocto Project - Linux Kernel
#2 lore raw
Quoted 6 lines · Darren Hart
Quoted 4 lines · jfabernathy

I've noticed that the meta-intel BSP come up with the default terminal, serial console user, etc. as root. What would it take to make my own BSP that was exactly the same, but the default was a not admin user, but you could su or sudo to root?

Quoted 7 lines

I'm adding Scott G. who I believe has been working on the useradd scripts and such (to sanity check the following). I believe you should be able to setup new users by extending an image recipe with a new task to make the necessary useradd/mod etc calls on the rootfs prior to packaging it up.

Scott, can you offer more detail on how that is done?

Hi Jim, Darren:

The useradd mechanism is for supporting custom users and groups in recipes. It sounds like what Jim may find more expedient would be to define a recipe which includes a first-boot script which creates the additional users/groups and then sets up custom ownership on the terminal, serial console user, etc. Otherwise you'd have to do this in several recipes.

Using the first-boot script approach is documented here:

http://www.yoctoproject.org/docs/current/poky-ref-manual/poky-ref-manual.html#usingpoky-extend-addpkg-postinstalls

Whereas using the useradd bitbake class is documented in an example recipe in meta-skeleton/recipes-skeleton/useradd/useradd-example.bb. There is also a slide deck you may find useful here:

http://wiki.yoctoproject.org/wiki/images/e/e6/Custom_Users_Groups_in_Yocto1.1.pdf

I'll also mention that I'm still shaking out bugs in the useradd mechanism. We have some race conditions that are complicating matters when building from sstate. So if you're using one of our stable releases, the first-boot script approach is probably your safest bet.

Scott

Signature · 3 lines
Scott Garman
Embedded Linux Engineer - Yocto Project
Intel Open Source Technology Center
#3 lore raw
Quoted 23 lines · Scott Garman
Quoted 6 lines · Darren Hart
Quoted 4 lines · jfabernathy

I've noticed that the meta-intel BSP come up with the default terminal, serial console user, etc. as root. What would it take to make my own BSP that was exactly the same, but the default was a not admin user, but you could su or sudo to root?

Quoted 7 lines

I'm adding Scott G. who I believe has been working on the useradd scripts and such (to sanity check the following). I believe you should be able to setup new users by extending an image recipe with a new task to make the necessary useradd/mod etc calls on the rootfs prior to packaging it up.

Scott, can you offer more detail on how that is done?

Hi Jim, Darren:

The useradd mechanism is for supporting custom users and groups in recipes. It sounds like what Jim may find more expedient would be to define a recipe which includes a first-boot script which creates the additional users/groups and then sets up custom ownership on the terminal, serial console user, etc. Otherwise you'd have to do this in several recipes.

Using the first-boot script approach is documented here:

http://www.yoctoproject.org/docs/current/poky-ref-manual/poky-ref-manual.html#usingpoky-extend-addpkg-postinstalls

Quoted 8 lines

Whereas using the useradd bitbake class is documented in an example recipe in meta-skeleton/recipes-skeleton/useradd/useradd-example.bb. There is also a slide deck you may find useful here:

http://wiki.yoctoproject.org/wiki/images/e/e6/Custom_Users_Groups_in_Yocto1.1.pdf

I'll also mention that I'm still shaking out bugs in the useradd mechanism. We have some race conditions that are complicating matters when building from sstate. So if you're using one of our stable releases, the first-boot script approach is probably your safest bet.

Scott

Thanks for these suggestions. I'll look them over and figure out what I want to do.

Jim A

Quoted 4 lines
Signature · 3 lines
Scott Garman
Embedded Linux Engineer - Yocto Project
Intel Open Source Technology Center