So I did a little bit more sanity checking and found two bugs. One in downstream: https://bugzilla.redhat.com/show_bug.cgi?id=1217977 and one in my patch here where the `input` gid matched the `dockerroot` gid. Currently `dockerroot` is unused so it doesn't matter.
But for reference, here's the fixup patch, based on the current trac ticket voting in https://fedorahosted.org/cloud/ticket/102 I plan to push tomorrow. >From 430cd88ba6de7ee26c67f6ecf6ccdc465954de8d Mon Sep 17 00:00:00 2001 From: Colin Walters <walt...@verbum.org> Date: Fri, 8 May 2015 16:44:26 -0400 Subject: [PATCH] fixup! passwd/group: Change to match downstream Red Hat Enterprise Linux --- group | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/group b/group index 4c705b5..95224b4 100644 --- a/group +++ b/group @@ -35,14 +35,14 @@ tss:x:59: avahi-autoipd:x:170: rpc:x:32: sssd:x:993: -dockerroot:x:996: +dockerroot:x:986: rpcuser:x:29: nfsnobody:x:65534: kube:x:994: sshd:x:74: chrony:x:992: tcpdump:x:72: -input:x:999: +input:x:995: systemd-timesync:x:991: systemd-network:x:990: systemd-resolve:x:989: -- 1.8.3.1