On Tue, Jul 14, 2020 at 04:46:31PM +0430, Reza Alizadeh Majd wrote:
>
> I assume that I find the issue source:
>
> > > > >
> > > > >--8<---------------cut here---------------start------------->8---
> > > > >
> > > > >(define %kyc-accounts
> > > > > (list (user-group (name "kyc-service"))
> > > > > (user-group (name "kyc-rpc"))
> > > > > (user-account
> > > > > (name "kyc-service")
> > > > > (group "kyc-service")
> > > > > (system? #f)
> > > > > (supplementary-groups '("wheel" "kyc-rpc" "video"))
> > > > > (comment "KYC service user"))))
> > > > >
> > > > >--8<---------------cut here---------------end--------------->8---
> > > > >
>
> I modified the service definition to open an empty 'screen', so I can
> access shell through service, when I connect to the screen and check
> user groups, it seems that the 'supplementary-groups' didn't apply to
> the user:
>
> --8<---------------cut here---------------start------------->8---
> sh-5.0$ whoami
> kyc-service
> sh-5.0$ groups
> kyc-service
> sh-5.0$
> --8<---------------cut here---------------end--------------->8---
>
> so, is there any thing that I missed?
> The only other thing I can think of right now is that you're creating the kyc-service and kyc-rpc groups AND also using them for the first time here. It could be that the kyc-service group is created with the kyc-service user and the kyc-rpc group is 'too slow'. Try your code again but without the kyc-rpc group. -- Efraim Flashner <[email protected]> אפרים פלשנר GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Confidentiality cannot be guaranteed on emails sent or received unencrypted
signature.asc
Description: PGP signature
