FS#79736 - [glibc][nss-pam-ldapd][shadow][systemd] disable building nscd

Attached to Project: Arch Linux
Opened by Allan McRae (Allan) - Tuesday, 19 September 2023, 13:47 GMT
Last edited by freswa (frederik) - Sunday, 24 September 2023, 13:15 GMT
Task Type Feature Request
Category Packages: Core
Status Closed
Assigned To Christian Hesse (eworm)
David Runge (dvzrv)
Johannes Löthberg (demize)
Giancarlo Razzolini (grazzolini)
freswa (frederik)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
While technically still maintained, nscd receives little attention and has significant bugs that are hard to fix (e.g. various concurrency bugs). The functionality of nscd can be replaced with systemd-resolved (hosts cache) and sssd (the rest).

Note, Fedora removed nscd a while ago:
https://fedoraproject.org/wiki/Changes/RemoveNSCD

Disabling nscd in the glibc package probably requires something like:
--disable-build-nscd
--disable-nscd

I have not tested how these flags interact with a not building binaries then building them with security flags dance.
This task depends upon

Closed by  freswa (frederik)
Sunday, 24 September 2023, 13:15 GMT
Reason for closing:  Implemented
Additional comments about closing:  2.38-4
Comment by loqs (loqs) - Tuesday, 19 September 2023, 13:51 GMT
See also  FS#58262 .
Comment by David Runge (dvzrv) - Wednesday, 20 September 2023, 07:48 GMT
I'm generally in favor of this change!

Looking at https://fedoraproject.org/wiki/Changes/RemoveNSCD#Dependencies we'll not only have to remove this from shadow, but also nss-pam-ldapd.
We do not ship libuser: https://pagure.io/libuser/

I don't know if there are any further dependents.
Comment by loqs (loqs) - Wednesday, 20 September 2023, 10:18 GMT
Possibly systemd [1][2].

[1] https://github.com/systemd/systemd-stable/commit/7e0079f95f9b7306b40f2300301af80d915e15e4
[2] https://github.com/systemd/systemd-stable/blob/v254.3/meson_options.txt#L58
Comment by Christian Hesse (eworm) - Wednesday, 20 September 2023, 10:42 GMT
For systemd this should be as easy as adding `-Dnscd=false` in meson options.
Comment by David Runge (dvzrv) - Sunday, 24 September 2023, 10:06 GMT
The use of nscd is disabled in the next rebuild of shadow (via https://gitlab.archlinux.org/archlinux/packaging/packages/shadow/-/commit/296544a96d9bcd87655e846e68c5172ebd3814a8).

Loading...