lets thread 1password chat πŸ˜‰

lets thread 1password chat πŸ˜‰
41 Replies
bsherman
bshermanOPβ€’2y ago
cat /etc/group|grep onepa
onepassword-cli:x:960:
onepassword:x:959:
cat /etc/group|grep onepa
onepassword-cli:x:960:
onepassword:x:959:
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
Yeah that’s what I was getting. I’m not sure if it was the same number but between 950 and 960 anyway
bsherman
bshermanOPβ€’2y ago
cat /usr/etc/group |grep one
onepassword-cli:x:1000:
onepassword:x:1001:
cat /usr/etc/group |grep one
onepassword-cli:x:1000:
onepassword:x:1001:
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
And that’s because they were created by the RPM before a real user (and the real user’s own group) were created But I don’t think it actually uses that file
bsherman
bshermanOPβ€’2y ago
yues, but this disparity of /usr/etc/group and /etc/group is one of the more annoying things i've seen in this world πŸ™‚ FYI https://github.com/bsherman/ublue-custom/blob/non-flatpack-browser/install-1password.sh I like using the repo vs direct file paths
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
Fair enough, though I have no idea how to fix that. I wonder if that’s where rpm-ostree generates the sysusers.d files from Like, by diffing that file I mean
bsherman
bshermanOPβ€’2y ago
yeah, i'm not sure why did you need to rpm-ostree unlock to modify /etc/groups ?
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
No that’s was to modify the sysusers.d file without going through the whole image build β†’ upgrade process You don’t need to unlock to modify /etc/groups
bsherman
bshermanOPβ€’2y ago
ok, i wasn't 100% following
sudo rpm-ostree unlock and then editing the file and running groupdel onepassword && systemd-sysusers to recreate the group
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
Yeah I’m usually not up this early anyway πŸ˜›
bsherman
bshermanOPβ€’2y ago
lol
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
But yeah, I wanted to test programmatically creating the group (because for whatever reason it doesn’t actually create it with the GID based on a file path like it says it’s supposed to…)
bsherman
bshermanOPβ€’2y ago
i'm attempting to clean my system... so re-rebasing to this image will work as intended... 1) rebasing to other image 2) groupdel of onepassword/onepassword-cli 3) ??? 4) rebase back to this image i think that should do it
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
I think so, at least because it’ll touch the RPM db I don’t know why it all has to be so complex. I just want to serve 5 terabytes
bsherman
bshermanOPβ€’2y ago
πŸ˜„
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
I’ve been trying to learn kubernetes recently and I’ve come to really appreciate that video
bsherman
bshermanOPβ€’2y ago
oh, i don' tknow the video
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
Benjamin Staffin
YouTube
I just want to serve 5 terabytes.
This video dates back to about 2010, and is the origin of the phrase "I've forgotten how to count that low" that was recently referenced in a blog post and on hacker news. (https://acesounderglass.com/2021/10/20/i-dont-know-how-to-count-that-low/) Even more related discussion: https://news.ycombinator.com/item?id=29082014 (2021-11-02) https://r...
bsherman
bshermanOPβ€’2y ago
lol, yes, i've seen it i love this "only if you think your users are scum. do you hate your users?"
bsherman
bshermanOPβ€’2y ago
that sounds like a transcript of some internal chat... which is horrible
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
It’s actually originally an internal meme at google, from back when Borg (their internal predecessor to kubernetes) was new
bsherman
bshermanOPβ€’2y ago
yep hmmm... didn't seem to work
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
Hm, do you have onepassword/onepassword-cli groups in your /etc/groups?
bsherman
bshermanOPβ€’2y ago
ls -l /usr/bin/op
-rwxr-sr-x. 2 root 1600 22846640 Dec 31 1969 /usr/bin/op


onepassword-cli:x:960:
onepassword:x:1500:
ls -l /usr/bin/op
-rwxr-sr-x. 2 root 1600 22846640 Dec 31 1969 /usr/bin/op


onepassword-cli:x:960:
onepassword:x:1500:
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
Okay, that’s better! I made two different systemd-sysusers files One for onepassword, one for onepassword-cli So I’m guessing the latter just has something wrong with it
bsherman
bshermanOPβ€’2y ago
yeah, i'm not sure why the /etc/group only picked up onepassword, but yeah
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
If you manually run sudo groupdel onepassword-cli && sudo systemd-sysusers does it recreate it properly?
bsherman
bshermanOPβ€’2y ago
ah hah!
/usr/lib/sysusers.d/onepassword-cli.conf:1: Conflict with earlier configuration for group 'onepassword-cli' in /usr/lib/sysusers.d/30-rpmostree-pkg-group-onepassword-cli.conf:2, ignoring line.
Creating group 'onepassword-cli' with GID 960.
/usr/lib/sysusers.d/onepassword-cli.conf:1: Conflict with earlier configuration for group 'onepassword-cli' in /usr/lib/sysusers.d/30-rpmostree-pkg-group-onepassword-cli.conf:2, ignoring line.
Creating group 'onepassword-cli' with GID 960.
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
Ah, cool! So I just need to remove that in my 1password.sh file too
bsherman
bshermanOPβ€’2y ago
that's because I'm using the rpm for cli not the zip download
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
Oh that’s even better, at least for me, because it means my thing isn’t wrong πŸ˜„
bsherman
bshermanOPβ€’2y ago
yep! this is going to be great! https://github.com/bsherman/ublue-custom/blob/non-flatpack-browser/install-1password.sh i could probably swap the chown for chgrp IT WORKS!
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
btw, 1password actually gives free teams/org accounts for open source projects https://github.com/1Password/1password-teams-open-source
GitHub
GitHub - 1Password/1password-teams-open-source: Get a free 1Passwor...
Get a free 1Password Teams membership for your open source project - GitHub - 1Password/1password-teams-open-source: Get a free 1Password Teams membership for your open source project
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
no doubt ublue qualifies, the only real requirement thereof is that whoever applies has to be a "core contributor for an active open source project that is at least 30 days old" also, one bug that i've had going on is that 1password suddenly/silently quits whenever doing rpm-ostree stuff. i'm not sure why, but probably something's getting touched and not liking it. but it seems completely reliable other than that
bsherman
bshermanOPβ€’2y ago
yep! we just set this up recently!
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
Awesome! @bsherman i meant to ask you, is there any particular reason you changed the GID values I set? i just want to know if they conflict with something i should be aware of so i can finish my PR for bling
bsherman
bshermanOPβ€’2y ago
i think there were 2 reasons: 1) it seemed better to me personally for 2 closely related groups like "onepassword" and "onepassword-cli" to be adjacent numbers rather than split by a hundred 2) 1500 is higher than 1000 and obviously not a default, but seems a more likely "random" pick for a non-default GID than something even higher and goofier like what i chose. totally my personal choice
π’ƒπ’“π’Šγ€Œπ˜΄π˜©π˜¦/π˜©π˜¦π˜³γ€
fair enough, that all makes sense. i left it at 1500 and 1600 but put a way to set it via env vars

Did you find this page helpful?