Re: UID/GID migration vom C6 to C8

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



> Hello.
>
> We have to migrate an old Centos 6 to Centos 8. C6 has UID/GID starting
> at number 500.
> I the Users should possibily keep the existing UID/GID as on the old
> system.
>
> I changed on the Centos 8 system, in /etc/login.defs, the lines
> UID_MIN/SYS_UID_MAX and GID_MIN/SYS_GID_MAX:
>
> #
> # Min/max values for automatic uid selection in useradd
> #
> UID_MIN                   500
> UID_MAX                 60000
> # System accounts
> SYS_UID_MIN               201
> SYS_UID_MAX               499
>
> #
> # Min/max values for automatic gid selection in groupadd
> #
> GID_MIN                   500
> GID_MAX                 60000
> # System accounts
> SYS_GID_MIN               201
> SYS_GID_MAX               499
>
> and extracted all users and groups with UID/GID greater than 499 from
> the old system and inserted in the corresponding files
> (passwd/groups/shadows) on the new system.
>
> So wanted to ask if this is a valid thing to do? Especially regarding
> security of the new system. Can it create problems in the future
> (updates etc.)?
> It is a simple LAMP server.

I was in a similar situation but on a quite large application server with
hundreds of users.
I quickly found that I don't want to fiddle with UID/GID settings so I
decided to change all users on the CentOS 6 host before migrating any
data.
I've created a script which uses `chown' to recursively change UIDs and
GIDs. I don't remember exactly but I think I made it run for every user in
parallel and it finished quite fast considering the fact that it had to
traverse the whole storage consisting of millions of files.
I could then later just rsync everything to the new box without ant
UID/GID conversion.
See below for the script `chuidgid'.

Regards,
Simon

----%<-----
#!/bin/bash

if (( $# < 4 )); then
  echo "Usage: $0 <username> <new uid> <new gid | \"\" = uid> <dir>
[<dir>...]"
  echo "Example: $0 user1 1000 \"\" /tmp /etc /usr /opt /var /home"
  echo
  echo "Important: this needs to run before changing any uid/gid!"
  exit 1
fi

USR="$1"
NEW_UID="$2"
NEW_GID="$3"

shift 3
DIRS=$@

OLD_UID=$(id -u "$USR")
OLD_GID=$(id -g "$USR")

if [[ -z "$NEW_GID" ]]; then
  NEW_GID="$NEW_UID"
fi

echo "modifying user $USR ids ${OLD_UID}:${OLD_GID} ->
${NEW_UID}:${NEW_GID} on $DIRS"

# Note: usermod changes ownership of at least $HOME and
/var/spool/mail/${USR}
groupmod -g "$NEW_GID" "$USR"
usermod -u "$NEW_UID" -g "$USR" "$USR"

chown --changes --silent --no-dereference --preserve-root --recursive
--from=":${OLD_GID}" ":${NEW_GID}" $DIRS
chown --changes --silent --no-dereference --preserve-root --recursive
--from="${OLD_UID}"   "${NEW_UID}" $DIRS
----%<-----

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
https://lists.centos.org/mailman/listinfo/centos




[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]


  Powered by Linux