Skip to content

Instantly share code, notes, and snippets.

@mz0
Last active December 15, 2024 19:37
Show Gist options
  • Select an option

  • Save mz0/281d762000b1fd47ea1708b3efe98255 to your computer and use it in GitHub Desktop.

Select an option

Save mz0/281d762000b1fd47ea1708b3efe98255 to your computer and use it in GitHub Desktop.
Ubuntu 24.04 setting up user with systemd-homed
apt-cache policy systemd-homed
# systemd-homed: Candidate: 255.4-1ubuntu8.4
sudo apt install systemd-homed
# The following NEW packages installed: systemd-homed systemd-userdbd
sudo homectl --real-name=ZM \
--uid=60131 \
--kill-processes=false \
--member-of=docker,dip,lpadmin,plugdev,ops,sudo,users,wireshark \
--ssh-authorized-keys=@/path/to/zm.id_ed25519.pub \
--ssh-authorized-keys=@/path/to/zm.id2.pub \
--storage=luks \
--fs-type=ext4 \
--disk-size='1%' \
create zm
@mz0
Copy link
Author

mz0 commented Dec 14, 2024

mz0:/$ su zm
Password: ***
To run a command as administrator (user "root"), use "sudo <command>".

zm@pug:/$ id
uid=60131(zm) gid=60131(zm) groups=60131(zm),27(sudo),30(dip),46(plugdev),100(users),114(lpadmin),124(wireshark),888(ops),984(docker)

$ ls -lAFh /home

drwx------  2 mz0   mz0   4.0K Dec 14 21:01 zm
-rw-------  1 root  root  4.0G Dec 14 21:01 zm.home

$ df -h
Filesystem           Size  Used Avail Use% Mounted on
/dev/nvme0n1p4       884G  150G  689G  18% /
/dev/nvme0n1p1        96M  6.2M   90M   7% /boot/efi
tmpfs                 16G  1.1M   16G   1% /dev/shm
tmpfs                3.2G  2.0M  3.2G   1% /run
tmpfs                5.0M   16K  5.0M   1% /run/lock
efivarfs             128K   42K   82K  34% /sys/firmware/efi/efivars
/dev/mapper/home-zm  3.9G   44K  3.9G   1% /home/zm

$ mount |grep zm
/dev/mapper/home-zm on /home/zm type ext4 (rw,nosuid,nodev,relatime,idmapped)

zm@pug$ ls -lA ~zm/

-rw-r--r-- 1 zm zm  220 Mar 31  2024 .bash_logout
-rw-r--r-- 1 zm zm 3771 Mar 31  2024 .bashrc
-rw------- 1 zm zm 1113 Dec 14 20:38 .identity
-rw-r--r-- 1 zm zm  807 Mar 31  2024 .profile

zm@pug$ cat ~/.identity 
{
	"disposition" : "regular",
	...
	"uid" : 60131,
	"userName" : "zm"
}

zm@pug$ exit

mz0:/$ ssh zm@localhost
zm@localhost's password: ***

Welcome to Ubuntu 24.04.1 LTS (GNU/Linux 6.8.0-50-generic x86_64)
 * Documentation:  https://help.ubuntu.com
 * ...
To run a command as administrator (user "root"), use "sudo <command>".

zm@pug:~$ df -h
Filesystem           Size  Used Avail Use% Mounted on
/dev/nvme0n1p4       884G  150G  689G  18% /
/dev/nvme0n1p1        96M  6.2M   90M   7% /boot/efi
tmpfs                 16G  1.1M   16G   1% /dev/shm
tmpfs                3.2G  2.0M  3.2G   1% /run
tmpfs                5.0M   16K  5.0M   1% /run/lock
tmpfs                3.2G  124K  3.2G   1% /run/user/1000
tmpfs                3.2G   72K  3.2G   1% /run/user/60131
efivarfs             128K   42K   82K  34% /sys/firmware/efi/efivars
/dev/mapper/home-zm  3.9G   64K  3.9G   1% /home/zm

@mz0
Copy link
Author

mz0 commented Dec 14, 2024

~zm/.identity is:

{
	"disposition" : "regular",
	"killProcesses" : false,
	"lastChangeUSec" : 1734194292019323,
	"lastPasswordChangeUSec" : 1734194292019323,
	"memberOf" : [
		"dip",
		"docker",
		"lpadmin",
		"ops",
		"plugdev",
		"sudo",
		"users",
		"wireshark"
	],
	"perMachine" : [
		{
			"diskSize" : 4294967296,
			"fileSystemType" : "ext4",
			"matchMachineId" : "5f54cbef1f5a471f998071bda68c830e",
			"rebalanceWeight" : 0,
			"storage" : "luks"
		}
	],
	"privileged" : {
		"hashedPassword" : [
			"$y$j9T$Z8P0mhG9yfr/CyYwCtqqz1$fhMr/vJOmO2Dw3mcMtO3GKM1knDqXLUhfk5rqsxRIlA"
		],
		"sshAuthorizedKeys" : [
			"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA3MKStmrL917EbmLfM52LnmRiAmF5uhlYh7NAXvjRId m@pug",
			"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPpiIKXMXvxzYNRAJFNkVMJeeIN5pzvbJI9pf1dNNl9p m0@n13"
		]
	},
	"realName" : "ZM",
	"signature" : [
		{
			"data" : "jmXh81tFKQdC6lICvk//+DeJaXGjCDTLSKHRLHonlrVcehbz8Hzza+VcJVSOkpBjkju+npZtojzFb12L6YMiDg==",
			"key" : "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEASHLiXjYgRK8kN20vZnyfJfxKIT1MMr64nBi1mFUkDXI=\n-----END PUBLIC KEY-----\n"
		}
	],
	"uid" : 60131,
	"userName" : "zm"
}

@mz0
Copy link
Author

mz0 commented Dec 14, 2024

homectl create USER

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment