Commit 4971ed01 authored by Will Fancher's avatar Will Fancher
Browse files

nixos/ids: Link to RFC #52 and explain that static IDs are not allowed.

parent 218901bd

ci/OWNERS

+1 −0
Original line number Diff line number Diff line
@@ -102,6 +102,7 @@ nixos/modules/installer/tools/nix-fallback-paths.nix @NixOS/nix-team @raitobeza 
/nixos/default.nix                                    @infinisil

/nixos/lib/from-env.nix                               @infinisil

/nixos/lib/eval-config.nix                            @infinisil

/nixos/modules/misc/ids.nix                           @R-VdP

/nixos/modules/system/activation/bootspec.nix         @grahamc @cole-h @raitobezarius

/nixos/modules/system/activation/bootspec.cue         @grahamc @cole-h @raitobezarius

nixos/modules/misc/ids.nix

+9 −6
Original line number Diff line number Diff line
@@ -2,12 +2,15 @@ 
# central list to prevent id collisions.



# IMPORTANT!

# We only add static uids and gids for services where it is not feasible

# to change uids/gids on service start, for example a service with a lot of

# files. Please also check if the service is applicable for systemd's

# DynamicUser option and does not need a uid/gid allocation at all.

# Systemd can also change ownership of service directories using the

# RuntimeDirectory/StateDirectory options.

#

# https://github.com/NixOS/rfcs/blob/master/rfcs/0052-dynamic-ids.md

#

# Use of static ids is deprecated within NixOS. Dynamic allocation is

# required, barring special circumstacnes. Please check if the service

# is applicable for systemd's DynamicUser option and does not need a

# uid/gid allocation at all.  Systemd can also change ownership of

# service directories using the RuntimeDirectory/StateDirectory

# options.



{ lib, ... }: