Option To Create /etc/passwd If It Does Not Exist

[p0da]

Is this a BUG REPORT or FEATURE REQUEST? (leave only one on its own line)

/kind feature

Description

Currently /etc/passwd is not created if it does not initially exist in the image, even if the --passwd/--passwd-entry flags are specified. Would it be possible to implement some option that enables podman to create /etc/passwd (probably /etc/group too) in order for the --passwd and --passwd-entry flags to have an effect in images that don't initially have a /etc/passwd?

[rhatdan]

Seems reasonable, interested in opening a PR?

[p0da]

Unfortunately I am not familiar enough with go make an attempt at it. However this functionality could also simply be added to the --passwd flag as that is what toggles the appending of entries.

[giuseppe]

I don't see why we don't create the file if it is missing, @mheon is it because of some compatibility with Docker?

If that is the case, we could probably add --passwd=always to override this check and always create the file

[mheon]

I don’t see any reason to not create it.

…

On Wed, Jul 20, 2022 at 05:59 Giuseppe Scrivano ***@***.***> wrote: I don't see why we don't create the file if it is missing, @mheon <https://github.com/mheon> is it because of some compatibility with Docker? If that is the case, we could probably add --passwd=always to override this check and always create the file — Reply to this email directly, view it on GitHub <#14966 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AB3AOCCLNRVCD42BNJEYDHDVU7EXDANCNFSM536J7LRA> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[rhatdan]

I agree we should create it if it does not exists. I don't think Docker has an equivalent. Most likely we just coded it to expect /etc/passwd exists in the container and do not handle ENOEXIST.

[mheon]

Yeah, concur. Not many images are missing a passwd file so it's not something we tested or thought of.

[giuseppe]

opened a PR: #15003

Keep in mind that --passwd-entry won't be enough to trigger the entry, you'll need to specify --user= as well