Merge branch 'main' into user-disable

shiv-tyagi · web-flow · commit e6410f4ce9a6 · 2025-02-10T21:37:04.000+05:30
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/debian/control b/debian/control
@@ -23,7 +23,7 @@ Build-Depends: debhelper-compat (= 13),
                protobuf-compiler,
 Standards-Version: 4.6.2
 XS-Go-Import-Path: github.com/ubuntu/authd
-XS-Vendored-Sources-Rust: adler@1.0.2, aho-corasick@1.1.3, anyhow@1.0.86, async-stream-impl@0.3.5, async-stream@0.3.5, async-trait@0.1.80, atomic-waker@1.1.2, autocfg@1.3.0, axum-core@0.4.3, axum@0.7.5, base64@0.22.1, bitflags@2.5.0, bytes@1.7.1, cc@1.2.10, cfg-if@1.0.0, chrono@0.4.38, colored@2.1.0, crc32fast@1.4.2, ctor@0.2.9, deranged@0.3.11, either@1.12.0, equivalent@1.0.1, errno@0.3.10, fastrand@2.1.0, fixedbitset@0.4.2, flate2@1.0.30, fnv@1.0.7, futures-channel@0.3.30, futures-core@0.3.30, futures-sink@0.3.30, futures-task@0.3.30, futures-util@0.3.30, getrandom@0.2.15, h2@0.4.6, hashbrown@0.12.3, hashbrown@0.14.5, heck@0.5.0, hex@0.4.3, hostname@0.4.0, http-body-util@0.1.2, http-body@1.0.1, http@1.1.0, httparse@1.8.0, httpdate@1.0.3, hyper-timeout@0.5.1, hyper-util@0.1.10, hyper@1.4.1, iana-time-zone@0.1.60, indexmap@1.9.3, indexmap@2.2.6, itertools@0.12.1, itoa@1.0.11, lazy_static@1.4.0, libc@0.2.169, libnss@0.8.0, linux-raw-sys@0.4.14, log@0.4.25, matchit@0.7.3, memchr@2.7.2, mime@0.3.17, miniz_oxide@0.7.3, mio@1.0.1, multimap@0.10.0, num-conv@0.1.0, num-traits@0.2.19, num_threads@0.1.7, once_cell@1.19.0, paste@1.0.15, percent-encoding@2.3.1, petgraph@0.6.5, pin-project-internal@1.1.5, pin-project-lite@0.2.14, pin-project@1.1.5, pin-utils@0.1.0, powerfmt@0.2.0, ppv-lite86@0.2.17, prettyplease@0.2.20, proc-macro2@1.0.84, procfs-core@0.17.0, procfs@0.17.0, prost-build@0.12.6, prost-derive@0.12.6, prost-derive@0.13.4, prost-types@0.12.6, prost@0.12.6, prost@0.13.4, quote@1.0.36, rand@0.8.5, rand_chacha@0.3.1, rand_core@0.6.4, regex-automata@0.4.6, regex-syntax@0.8.3, regex@1.10.4, rustix@0.38.44, rustversion@1.0.17, serde@1.0.203, shlex@1.3.0, simple_logger@5.0.0, slab@0.4.9, smallvec@1.13.2, socket2@0.5.7, syn@2.0.66, sync_wrapper@0.1.2, sync_wrapper@1.0.1, syslog@7.0.0, tempfile@3.10.1, time-core@0.1.2, time-macros@0.2.18, time@0.3.36, tokio-macros@2.5.0, tokio-stream@0.1.16, tokio-util@0.7.11, tokio@1.43.0, tonic-build@0.11.0, tonic@0.12.3, tower-layer@0.3.2, tower-service@0.3.2, tower@0.4.13, tracing-attributes@0.1.27, tracing-core@0.1.32, tracing@0.1.40, try-lock@0.2.5, unicode-ident@1.0.12, want@0.3.1
+XS-Vendored-Sources-Rust: adler@1.0.2, aho-corasick@1.1.3, anyhow@1.0.86, async-stream-impl@0.3.5, async-stream@0.3.5, async-trait@0.1.80, atomic-waker@1.1.2, autocfg@1.3.0, axum-core@0.4.3, axum@0.7.5, base64@0.22.1, bitflags@2.5.0, bytes@1.7.1, cc@1.2.12, cfg-if@1.0.0, chrono@0.4.38, colored@2.1.0, crc32fast@1.4.2, ctor@0.2.9, deranged@0.3.11, either@1.12.0, equivalent@1.0.1, errno@0.3.10, fastrand@2.1.0, fixedbitset@0.4.2, flate2@1.0.30, fnv@1.0.7, futures-channel@0.3.30, futures-core@0.3.30, futures-sink@0.3.30, futures-task@0.3.30, futures-util@0.3.30, getrandom@0.2.15, h2@0.4.6, hashbrown@0.12.3, hashbrown@0.14.5, heck@0.5.0, hex@0.4.3, hostname@0.4.0, http-body-util@0.1.2, http-body@1.0.1, http@1.1.0, httparse@1.8.0, httpdate@1.0.3, hyper-timeout@0.5.1, hyper-util@0.1.10, hyper@1.4.1, iana-time-zone@0.1.60, indexmap@1.9.3, indexmap@2.2.6, itertools@0.12.1, itoa@1.0.11, lazy_static@1.4.0, libc@0.2.169, libnss@0.8.0, linux-raw-sys@0.4.14, log@0.4.25, matchit@0.7.3, memchr@2.7.2, mime@0.3.17, miniz_oxide@0.7.3, mio@1.0.1, multimap@0.10.0, num-conv@0.1.0, num-traits@0.2.19, num_threads@0.1.7, once_cell@1.19.0, paste@1.0.15, percent-encoding@2.3.1, petgraph@0.6.5, pin-project-internal@1.1.5, pin-project-lite@0.2.14, pin-project@1.1.5, pin-utils@0.1.0, powerfmt@0.2.0, ppv-lite86@0.2.17, prettyplease@0.2.20, proc-macro2@1.0.84, procfs-core@0.17.0, procfs@0.17.0, prost-build@0.12.6, prost-derive@0.12.6, prost-derive@0.13.4, prost-types@0.12.6, prost@0.12.6, prost@0.13.4, quote@1.0.36, rand@0.8.5, rand_chacha@0.3.1, rand_core@0.6.4, regex-automata@0.4.6, regex-syntax@0.8.3, regex@1.10.4, rustix@0.38.44, rustversion@1.0.17, serde@1.0.203, shlex@1.3.0, simple_logger@5.0.0, slab@0.4.9, smallvec@1.13.2, socket2@0.5.7, syn@2.0.66, sync_wrapper@0.1.2, sync_wrapper@1.0.1, syslog@7.0.0, tempfile@3.10.1, time-core@0.1.2, time-macros@0.2.18, time@0.3.36, tokio-macros@2.5.0, tokio-stream@0.1.16, tokio-util@0.7.11, tokio@1.43.0, tonic-build@0.11.0, tonic@0.12.3, tower-layer@0.3.2, tower-service@0.3.2, tower@0.4.13, tracing-attributes@0.1.27, tracing-core@0.1.32, tracing@0.1.40, try-lock@0.2.5, unicode-ident@1.0.12, want@0.3.1
 Homepage: https://github.com/ubuntu/authd
 Vcs-Browser: https://github.com/ubuntu/authd
 Vcs-Git: https://github.com/ubuntu/authd.git
diff --git a/docs/conf.py b/docs/conf.py
@@ -210,7 +210,7 @@
 # NOTE: By default, the following MyST extensions are enabled:
 #       substitution, deflist, linkify
 
-# myst_enable_extensions = set()
+myst_enable_extensions = set({"colon_fence"})
 
 
 # Auto-generate header anchors
diff --git a/docs/howto/install-authd.md b/docs/howto/install-authd.md
@@ -1,36 +1,60 @@
 # Installation
 
 This project consists of two components:
-* authd: The authentication daemon responsible for managing access to the authentication mechanism.
-* an identity broker: The services that handle the interface with an identity provider. There can be several identity brokers installed and enabled on the system.
+* **authd**: The authentication daemon responsible for managing access to the authentication mechanism.
+* **identity broker**: The services that handle the interface with an identity provider. There can be several identity brokers installed and enabled on the system.
 
-authd is delivered as a Debian package.
+authd is delivered as a Debian package for Ubuntu Desktop and Ubuntu Server.
 
 ## System requirements
 
 * Distribution: Ubuntu Desktop 24.04 LTS or Ubuntu Server 24.04 LTS
 * Architectures: amd64, arm64
 
+## Install authd
 
-```{note}
-While this project is in active development, a version for Ubuntu 24.04 is available from the [authd testing PPA](https://launchpad.net/~ubuntu-enterprise-desktop/+archive/ubuntu/authd). <br />
+You can install authd from the [stable PPA](https://launchpad.net/~ubuntu-enterprise-desktop/+archive/ubuntu/authd).
 
-You can add this PPA to your system's software sources with the following commands:
+To add this PPA to your system's software sources, run the following commands:
 
 ```shell
 sudo add-apt-repository ppa:ubuntu-enterprise-desktop/authd
 sudo apt update
 ```
 
-Install the following Debian packages (note that `gnome-shell` and `yaru-theme*` are only required for desktop integration, server installations may ignore them):
+```{note}
+The stable PPA release of authd can be used today as an authentication service.
+This project is under active development and the release of authd to the
+official archive is planned for Ubuntu 26.04 LTS.
+```
+
+Then install authd and any additional Debian packages needed for your system of
+choice:
+
+:::::{tab-set}
+:sync-group: system
+
+::::{tab-item} Ubuntu Desktop
+:sync: desktop
 
 ```shell
 sudo apt install authd gnome-shell yaru-theme-gnome-shell
 ```
+::::
+
+::::{tab-item} Ubuntu Server
+:sync: server
+
+```shell
+sudo apt install authd
+```
+::::
+:::::
 
 ## Install brokers
 
-The brokers are provided as Snap packages and available from the Snap Store.
+The brokers are provided as Snap packages and are available from the Snap
+Store.
 
 ### MS Entra ID broker
 
@@ -40,7 +64,8 @@ To install the MS Entra ID broker, run the following command:
 sudo snap install authd-msentraid
 ```
 
-At this stage, you have installed the main service and an identity broker to authenticate against Microsoft Entra ID.
+At this stage, you have installed the main service and an identity broker to
+authenticate against Microsoft Entra ID.
 
 ### Google IAM broker
 
@@ -50,4 +75,5 @@ To install the Google IAM broker, run the following command:
 sudo snap install authd-google
 ```
 
-At this stage, you have installed the main service and an identity broker to authenticate against Google IAM.
+At this stage, you have installed the main service and an identity broker to
+authenticate against Google IAM.
diff --git a/go.mod b/go.mod
@@ -2,7 +2,7 @@ module github.com/ubuntu/authd
 
 go 1.23.0
 
-toolchain go1.23.5
+toolchain go1.23.6
 
 require (
 	github.com/charmbracelet/bubbles v0.20.0
diff --git a/internal/users/manager.go b/internal/users/manager.go
@@ -366,9 +366,8 @@ func (m *Manager) UserByID(uid uint32) (types.UserEntry, error) {
 
 // AllUsers returns all users.
 func (m *Manager) AllUsers() ([]types.UserEntry, error) {
-	// TODO: I'm not sure if we should return temporary users here. On the one hand, they are usually not interesting to
-	// the user and would clutter the output of `getent passwd`. On the other hand, it might be surprising that some
-	// users are not returned by `getent passwd` and some apps might rely on all users being returned.
+	// We don't return temporary users here, because they are not interesting to the user and would clutter the output
+	// of `getent passwd`. Other tools should check `getpwnam`/`getpwuid` to check for conflicts, like `useradd` does.
 	usrs, err := m.cache.AllUsers()
 	if err != nil {
 		return nil, err
@@ -409,7 +408,7 @@ func (m *Manager) GroupByID(gid uint32) (types.GroupEntry, error) {
 
 // AllGroups returns all groups.
 func (m *Manager) AllGroups() ([]types.GroupEntry, error) {
-	// TODO: Same as for AllUsers, we might want to return temporary groups here.
+	// Same as in AllUsers, we don't return temporary groups here.
 	grps, err := m.cache.AllGroups()
 	if err != nil {
 		return nil, err
@@ -433,7 +432,6 @@ func (m *Manager) ShadowByName(username string) (types.ShadowEntry, error) {
 
 // AllShadows returns all shadow entries.
 func (m *Manager) AllShadows() ([]types.ShadowEntry, error) {
-	// TODO: Even less sure if we should return temporary users here.
 	usrs, err := m.cache.AllUsers()
 	if err != nil {
 		return nil, err
diff --git a/nss/Cargo.toml b/nss/Cargo.toml
@@ -33,4 +33,4 @@ hyper-util = "0.1.10"
 [build-dependencies]
 # We need to pin tonic-build to 0.11.* for now until https://github.com/hyperium/tonic/issues/1909 is fixed.
 tonic-build = "0.11.*"
-cc = "1.2.10"
+cc = "1.2.12"
