<div dir="ltr"><div class="gmail_default" style="font-size:large">Yanchen,</div><div class="gmail_default" style="font-size:large"> I found out it's used by systemd. Unless you are using ubi-init, I suspect this UID could be re-used.</div><div class="gmail_default" style="font-size:large"><br></div><div class="gmail_default" style="font-size:large"><span style="font-size:small">“rpm -qa --qf "[%{NAME}\n]" --scripts” eventually leads to:</span><br style="font-size:small"><br style="font-size:small"><span style="font-size:small">commit db8b8fe77ce30244ad82e70ec4e830</span><span style="font-size:small">2b0c9dbf41</span><br style="font-size:small"><span style="font-size:small">Author: Yu Watanabe <</span><a href="mailto:watanabe.yu%2Bgithub@gmail.com" target="_blank" style="font-size:small">watanabe.yu+github@gmail.com</a><span style="font-size:small">></span><br style="font-size:small"><span style="font-size:small">Date: Tue Dec 12 14:28:11 2017 +0900</span><br style="font-size:small"><br style="font-size:small"><span style="font-size:small"> create render group, remove groups for timesync, journal-gateway and journal-upload</span><br style="font-size:small"><br style="font-size:small"><span style="font-size:small"><</span><a href="https://src.fedoraproject.org/rpms/systemd/c/db8b8fe77ce30244ad82e70ec4e8302b0c9dbf41" rel="noreferrer" target="_blank" style="font-size:small">https://src.fedoraproject.org/rpms/systemd/c/db8b8fe77ce30244ad82e70ec4e8302b0c9dbf41</a><span style="font-size:small">></span><br style="font-size:small"><br style="font-size:small"><span style="font-size:small">It's implementing this systemd change:</span><br style="font-size:small"><br style="font-size:small"><span style="font-size:small">commit 4e15a7343cb389e97f3eb4f4969916</span><span style="font-size:small">1862d8b8b2</span><br style="font-size:small"><span style="font-size:small">Author: Tom Stellard <</span><a href="mailto:tstellar@redhat.com" target="_blank" style="font-size:small">tstellar@redhat.com</a><span style="font-size:small">></span><br style="font-size:small"><span style="font-size:small">Date: Tue Oct 31 08:46:24 2017 -0700</span><br style="font-size:small"><br style="font-size:small"><span style="font-size:small"> udev-rules: Permission changes for /dev/dri/renderD*</span><br style="font-size:small"><br style="font-size:small"><span style="font-size:small"> - Remove the uaccess tag from /dev/dri/renderD*.</span><br style="font-size:small"><span style="font-size:small"> - Change the owning group from video to render.</span><br style="font-size:small"><span style="font-size:small"> - Change default mode to 0666.</span><br style="font-size:small"><span style="font-size:small"> - Add an option to allow users to set the access mode for these devices at</span><br style="font-size:small"><span style="font-size:small"> compile time.</span><br style="font-size:small"><br style="font-size:small"><span style="font-size:small"><</span><a href="https://github.com/systemd/systemd/commit/4e15a7343cb389e97f3eb4f49699161862d8b8b2" rel="noreferrer" target="_blank" style="font-size:small">https://github.com/systemd/systemd/commit/4e15a7343cb389e97f3eb4f49699161862d8b8b2</a><span style="font-size:small">></span><br></div><div class="gmail_default" style="font-size:large"><span style="font-size:small"><br></span></div><div class="gmail_default" style="font-size:large"><span style="font-size:small">Best Regards<br>Scott M</span></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jul 7, 2020 at 10:58 AM Yuanchen Lu <<a href="mailto:Yuanchen.Lu@ibm.com">Yuanchen.Lu@ibm.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr" style="font-family:Arial,Helvetica,sans-serif;font-size:10pt"><div dir="ltr">Hello,</div> <div dir="ltr"> </div> <div dir="ltr">I'm using a base image of "<a href="http://registry.access.redhat.com/ubi8/ubi:8.1" target="_blank">registry.access.redhat.com/ubi8/ubi:8.1</a>" to build an application. I need to assign a group with id 998 because of a legacy fileset (data was previously owned by a user in that group). However, it seems group 998 is already assigned to "render":</div> <div dir="ltr"> </div> <div dir="ltr"><p style="margin:0px;font-stretch:normal;font-size:16px;line-height:normal;font-family:Courier;color:rgb(59,35,34);background-color:rgb(215,211,183)"><span style="font-variant-ligatures:no-common-ligatures">cat /etc/group | grep 998</span></p> <p style="margin:0px;font-stretch:normal;font-size:16px;line-height:normal;font-family:Courier;color:rgb(59,35,34);background-color:rgb(215,211,183)"><span style="font-variant-ligatures:no-common-ligatures">render:x:</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(159,20,16)"><b>998</b></span><span style="font-variant-ligatures:no-common-ligatures">:</span></p> <div> </div> <div> </div> <div>Is there any documentation available explaining what this "render" group is for? Would it be safe to remove the group to free up group id 998?</div> <div> </div> <div>Thanks in advance,</div> <div>Yuanchen Lu</div> <div> </div></div></div><br> _______________________________________________<br> Ubi mailing list<br> <a href="mailto:Ubi@redhat.com" target="_blank">Ubi@redhat.com</a><br> <a href="https://www.redhat.com/mailman/listinfo/ubi" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/ubi</a><br> </blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><pre>--</pre><pre>A Comparison of Linux Container Images: <a href="http://crunchtools.com/comparison-linux-container-images/" style="font-family:Arial,Helvetica,sans-serif" target="_blank">http://crunchtools.com/comparison-linux-container-images/</a></pre><pre>--</pre><pre></pre><pre><font size="2">Scott McCarty Product Management - Containers, Red Hat Enterprise Linux & OpenShift Email: <a href="mailto:smccarty@redhat.com" target="_blank">smccarty@redhat.com</a> Phone: 312-660-3535 Cell: 330-807-1043 Web: <a href="http://crunchtools.com" target="_blank">http://crunchtools.com</a></font><pre>Using Azure Pipelines with Red Hat Universal Base Image and Quay.io: <a href="https://red.ht/2TvYo3Y" target="_blank">https://red.ht/2TvYo3Y</a></pre></pre></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>