What are all of the users and groups in a base RHEL installation?

Solution Unverified - Updated

Environment

  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9

Issue

  • What is a comprehensive list of all the users and groups created by RPMs in a base RHEL installation?

Resolution

If you are looking for reserved uids/gids, please see:

Here is list of users & groups created by RPMs in RHEL 8.7:

USERGROUPUIDGIDHOMESHELLDESCRIPTIONPACKAGE
  • | dbus | - | 81 | - | - | - | dbus-daemon-1.12.8-23.el8.x86_64.rpm
    dbus | - | 81 | 81 | / | /sbin/nologin | "System message bus" | dbus-daemon-1.12.8-23.el8.x86_64.rpm
  • | utmp | - | 22 | - | - | - | libutempter-1.1.6-14.el8.x86_64.rpm
  • | utempter | - | 35 | - | - | - | libutempter-1.1.6-14.el8.x86_64.rpm
  • | input | - | - | - | - | - | systemd-239-68.el8.x86_64.rpm
  • | kvm | - | 36 | - | - | - | systemd-239-68.el8.x86_64.rpm
  • | render | - | - | - | - | - | systemd-239-68.el8.x86_64.rpm
  • | systemd-journal | - | 190 | - | - | - | systemd-239-68.el8.x86_64.rpm
  • | systemd-coredump | - | - | - | - | - | systemd-239-68.el8.x86_64.rpm
    systemd-coredump | - | - | systemd-coredump | / | /sbin/nologin | "systemd Core Dumper" | systemd-239-68.el8.x86_64.rpm
  • | systemd-resolve | - | 193 | - | - | - | systemd-239-68.el8.x86_64.rpm
    systemd-resolve | - | 193 | systemd-resolve | / | /sbin/nologin | "systemd Resolver" | systemd-239-68.el8.x86_64.rpm
  • | tss | - | 59 | - | - | - | trousers-0.3.15-1.el8.x86_64.rpm
    tss | - | 59 | tss | /dev/null | /sbin/nologin | "Account used for TPM access" | trousers-0.3.15-1.el8.x86_64.rpm
  • | unbound | - | - | - | - | - | unbound-libs-1.16.2-2.el8.x86_64.rpm
    unbound | - | - | unbound | /etc/unbound | /sbin/nologin | "Unbound DNS resolver" | unbound-libs-1.16.2-2.el8.x86_64.rpm
  • | postdrop | - | 90 | - | - | - | postfix-3.5.8-4.el8.x86_64.rpm
  • | postfix | - | 89 | - | - | - | postfix-3.5.8-4.el8.x86_64.rpm
  • | mail | - | 12 | - | - | - | postfix-3.5.8-4.el8.x86_64.rpm
    postfix | - | 89 | postfix | /var/spool/postfix | /sbin/nologin | - | postfix-3.5.8-4.el8.x86_64.rpm
  • | printadmin | - | - | - | - | - | samba-common-4.16.4-2.el8.noarch.rpm
  • | ssh_keys | - | - | - | - | - | openssh-8.0p1-16.el8.x86_64.rpm
  • | apache | - | 48 | - | - | - | httpd-filesystem-2.4.37-51.module+el8.7.0+16050+02173b8e.noarch.rpm
    apache | - | 48 | apache | /usr/share/httpd | /sbin/nologin | "Apache" | httpd-filesystem-2.4.37-51.module+el8.7.0+16050+02173b8e.noarch.rpm
  • | printadmin | - | - | - | - | - | samba-common-4.16.4-2.el8.noarch.rpm
  • | ssh_keys | - | - | - | - | - | openssh-8.0p1-16.el8.x86_64.rpm
  • | apache | - | 48 | - | - | - | httpd-filesystem-2.4.37-51.module+el8.7.0+16050+02173b8e.noarch.rpm
    apache | - | 48 | apache | /usr/share/httpd | /sbin/nologin | "Apache" | httpd-filesystem-2.4.37-51.module+el8.7.0+16050+02173b8e.noarch.rpm
  • | pkcs11 | - | - | - | - | - | opencryptoki-libs-3.18.0-3.el8.x86_64.rpm
  • | rpc | - | 32 | - | - | - | rpcbind-1.2.5-10.el8.x86_64.rpm
    rpc | - | 32 | rpc | /var/lib/rpcbind | /sbin/nologin | "Rpcbind Daemon" | rpcbind-1.2.5-10.el8.x86_64.rpm
  • | qat | - | - | - | - | - | qatlib-22.07.0-1.el8.x86_64.rpm
  • | libstoragemgmt | - | - | - | - | - | libstoragemgmt-1.9.1-3.el8.x86_64.rpm
    libstoragemgmt | - | - | libstoragemgmt | /var/run/lsm | /sbin/nologin | "daemon account for libstoragemgmt" | libstoragemgmt-1.9.1-3.el8.x86_64.rpm
  • | bacula | - | 133 | - | - | - | bacula-common-9.0.6-6.el8.x86_64.rpm
    bacula | - | 133 | bacula | /var/spool/bacula | /sbin/nologin | "Bacula Backup System" | bacula-common-9.0.6-6.el8.x86_64.rpm
  • | gluster | - | - | - | - | - | glusterfs-6.0-56.4.el8.x86_64.rpm
    gluster | - | - | gluster | /run/gluster | /sbin/nologin | "GlusterFS daemons" | glusterfs-6.0-56.4.el8.x86_64.rpm
  • | postgres | - | 26 | - | - | - | postgresql-server-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm
    postgres | - | 26 | postgres | /var/lib/pgsql | /bin/bash | "PostgreSQL Server" | postgresql-server-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm
  • | dovecot | - | 97 | - | - | - | dovecot-2.3.16-3.el8.x86_64.rpm
    dovecot | - | 97 | dovecot | /usr/libexec/dovecot | /sbin/nologin | "Dovecot IMAP server" | dovecot-2.3.16-3.el8.x86_64.rpm
  • | dovenull | - | - | - | - | - | dovecot-2.3.16-3.el8.x86_64.rpm
    dovenull | - | - | dovenull | /usr/libexec/dovecot | /sbin/nologin | "Dovecot's unauthorized user" | dovecot-2.3.16-3.el8.x86_64.rpm
  • | cgred | - | - | - | - | - | libcgroup-0.41-19.el8.x86_64.rpm
  • | saslauth | - | 76 | - | - | - | cyrus-sasl-2.1.27-6.el8_5.x86_64.rpm
    saslauth | - | - | saslauth | /run/saslauthd | /sbin/nologin | "Saslauthd user" | cyrus-sasl-2.1.27-6.el8_5.x86_64.rpm
  • | radiusd | - | 95 | - | - | - | freeradius-3.0.20-12.module+el8.6.0+13617+542eca26.x86_64.rpm
    radiusd | - | 95 | radiusd | /var/lib/radiusd | /sbin/nologin | "radiusd user" | freeradius-3.0.20-12.module+el8.6.0+13617+542eca26.x86_64.rpm
  • | avahi | - | 70 | - | - | - | avahi-0.7-20.el8.x86_64.rpm
    avahi | - | 70 | avahi | /var/run/avahi-daemon | /sbin/nologin | "Avahi mDNS/DNS-SD Stack" | avahi-0.7-20.el8.x86_64.rpm
  • | mysql | - | 27 | - | - | - | mariadb-server-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpm
    mysql | - | 27 | mysql | /var/lib/mysql | /sbin/nologin | "MySQL Server" | mariadb-server-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpm
  • | sanlock | - | 179 | - | - | - | sanlock-3.8.4-4.el8.x86_64.rpm
    sanlock | - | 179 | 179 | /run/sanlock | /sbin/nologin | "sanlock" | sanlock-3.8.4-4.el8.x86_64.rpm
  • | dip | - | 40 | - | - | - | ppp-2.4.7-26.el8.x86_64.rpm
  • | stapusr | - | 156 | - | - | - | systemtap-runtime-4.7-1.el8.x86_64.rpm
  • | stapsys | - | 157 | - | - | - | systemtap-runtime-4.7-1.el8.x86_64.rpm
  • | stapdev | - | 158 | - | - | - | systemtap-runtime-4.7-1.el8.x86_64.rpm
  • | mailnull | - | 47 | - | - | - | sendmail-8.15.2-34.el8.x86_64.rpm
    mailnull | - | 47 | mailnull | /var/spool/mqueue | /sbin/nologin | - | sendmail-8.15.2-34.el8.x86_64.rpm
  • | smmsp | - | 51 | - | - | - | sendmail-8.15.2-34.el8.x86_64.rpm
    smmsp | - | 51 | smmsp | /var/spool/mqueue | /sbin/nologin | - | sendmail-8.15.2-34.el8.x86_64.rpm
  • | nginx | - | - | - | - | - | nginx-filesystem-1.14.1-9.module+el8.0.0+4108+af250afe.noarch.rpm
    nginx | - | - | nginx | /var/lib/nginx | /sbin/nologin | "Nginx web server" | nginx-filesystem-1.14.1-9.module+el8.0.0+4108+af250afe.noarch.rpm
  • | qemu | - | 107 | - | - | - | qemu-kvm-common-6.2.0-20.module+el8.7.0+16689+53d59bc2.1.x86_64.rpm
    qemu | - | 107 | qemu | / | /sbin/nologin | "qemu user" | qemu-kvm-common-6.2.0-20.module+el8.7.0+16689+53d59bc2.1.x86_64.rpm
  • | named | - | 25 | - | - | - | bind-9.11.36-5.el8.x86_64.rpm
    named | - | 25 | named | /var/named | /bin/false | "Named" | bind-9.11.36-5.el8.x86_64.rpm
  • | polkitd | - | - | - | - | - | polkit-0.115-13.el8_5.2.x86_64.rpm
    polkitd | - | - | polkitd | / | /sbin/nologin | "User for polkitd" | polkit-0.115-13.el8_5.2.x86_64.rpm
  • | rtkit | - | 172 | - | - | - | rtkit-0.11-19.el8.x86_64.rpm
    rtkit | - | 172 | rtkit | /proc | /sbin/nologin | "RealtimeKit" | rtkit-0.11-19.el8.x86_64.rpm
  • | pipewire | - | - | - | - | - | pipewire-0.3.6-1.el8.x86_64.rpm
    pipewire | - | - | pipewire | /var/run/pipewire | /sbin/nologin | "PipeWire System Daemon" | pipewire-0.3.6-1.el8.x86_64.rpm
  • | rpcuser | - | 29 | - | - | - | nfs-utils-2.3.3-57.el8.x86_64.rpm
    rpcuser | - | 29 | 29 | /var/lib/nfs | /sbin/nologin | "RPC Service User" | nfs-utils-2.3.3-57.el8.x86_64.rpm
  • | chrony | - | - | - | - | - | chrony-4.2-1.el8.x86_64.rpm
    chrony | - | - | chrony | /var/lib/chrony | /sbin/nologin | - | chrony-4.2-1.el8.x86_64.rpm
  • | libvirtdbus | - | - | - | - | - | libvirt-dbus-1.3.0-2.module+el8.7.0+16689+53d59bc2.x86_64.rpm
    libvirtdbus | - | - | libvirtdbus | / | /sbin/nologin | "Libvirt D-Bus bridge" | libvirt-dbus-1.3.0-2.module+el8.7.0+16689+53d59bc2.x86_64.rpm
  • | pegasus | - | 65 | - | - | - | tog-pegasus-libs-2.14.1-46.el8.x86_64.rpm
    pegasus | - | 66 | pegasus | /var/lib/Pegasus | /sbin/nologin | "tog-pegasus OpenPegasus WBEM/CIM services" | tog-pegasus-libs-2.14.1-46.el8.x86_64.rpm
  • | lldpd | - | - | - | - | - | lldpd-1.0.1-2.el8.x86_64.rpm
    lldpd | - | - | lldpd | /var/lib/lldpd | /sbin/nologin | "Used by the lldpd daemon" | lldpd-1.0.1-2.el8.x86_64.rpm
    cyrus | - | 76 | mail | /var/lib/imap | /sbin/nologin | "Cyrus IMAP Server" | cyrus-imapd-3.0.7-24.el8.x86_64.rpm
    amandabackup | - | 33 | disk | /var/lib/amanda | /bin/bash | "Amanda user" | amanda-3.5.1-13.el8.x86_64.rpm
  • | sssd | - | - | - | - | - | sssd-common-2.7.3-4.el8.x86_64.rpm
    sssd | - | - | sssd | / | /sbin/nologin | "User for sssd" | sssd-common-2.7.3-4.el8.x86_64.rpm
  • | munge | - | - | - | - | - | munge-0.5.13-2.el8.x86_64.rpm
    munge | - | - | munge | /var/run/munge | /sbin/nologin | "Runs Uid 'N' Gid Emporium" | munge-0.5.13-2.el8.x86_64.rpm
    garb | - | - | - | /dev/null | /sbin/nologin | "Galera Arbitrator Daemon" | galera-25.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpm
  • | usbmuxd | - | 113 | - | - | - | usbmuxd-1.1.0-13.el8.x86_64.rpm
    usbmuxd | - | 113 | usbmuxd | / | /sbin/nologin | "usbmuxd user" | usbmuxd-1.1.0-13.el8.x86_64.rpm
  • | sshd | - | 74 | - | - | - | openssh-server-8.0p1-16.el8.x86_64.rpm
    sshd | - | 74 | sshd | /var/empty/sshd | /sbin/nologin | "Privilege-separated SSH" | openssh-server-8.0p1-16.el8.x86_64.rpm
  • | redis | - | - | - | - | - | redis-5.0.3-5.module+el8.4.0+12927+b9845322.x86_64.rpm
    redis | - | - | redis | /var/lib/redis | /sbin/nologin | "Redis Database Server" | redis-5.0.3-5.module+el8.4.0+12927+b9845322.x86_64.rpm
  • | wbpriv | - | 88 | - | - | - | samba-winbind-4.16.4-2.el8.x86_64.rpm
  • | tlog | - | - | - | - | - | tlog-12.1-2.el8.x86_64.rpm
    tlog | - | - | tlog | /var/run/tlog | /sbin/nologin | "Tlog terminal I/O logger" | tlog-12.1-2.el8.x86_64.rpm
    fapolicyd | - | - | - | /var/lib/fapolicyd | /sbin/nologin | "Application Whitelisting Daemon" | fapolicyd-1.1.3-8.el8.x86_64.rpm
  • | pcp | - | - | - | - | - | pcp-5.3.7-7.el8.x86_64.rpm
    pcp | - | - | pcp | /var/lib/pcp | /sbin/nologin | "Performance Co-Pilot" | pcp-5.3.7-7.el8.x86_64.rpm
  • | clevis | - | - | - | - | - | clevis-15-11.el8.x86_64.rpm
    clevis | - | - | clevis | /var/cache/clevis | /sbin/nologin | "Clevis Decryption Framework unprivileged user" | clevis-15-11.el8.x86_64.rpm
  • | brlapi | - | - | - | - | - | brlapi-0.6.7-32.el8.x86_64.rpm
  • | pulse-access | - | - | - | - | - | pulseaudio-14.0-4.el8.x86_64.rpm
  • | pulse-rt | - | - | - | - | - | pulseaudio-14.0-4.el8.x86_64.rpm
  • | pulse | - | 171 | - | - | - | pulseaudio-14.0-4.el8.x86_64.rpm
    pulse | - | 171 | pulse | /var/run/pulse | /sbin/nologin | "PulseAudio System Daemon" | pulseaudio-14.0-4.el8.x86_64.rpm
    setroubleshoot | - | - | setroubleshoot | /var/lib/setroubleshoot | /sbin/nologin | - | setroubleshoot-server-3.3.26-5.el8.x86_64.rpm
  • | colord | - | - | - | - | - | colord-1.4.2-1.el8.x86_64.rpm
    colord | - | - | colord | /var/lib/colord | /sbin/nologin | "User for colord" | colord-1.4.2-1.el8.x86_64.rpm
  • | sfcb | - | - | - | - | - | sblim-sfcb-1.4.9-17.el8.x86_64.rpm
  • | libvirt | - | - | - | - | - | libvirt-daemon-8.0.0-10.module+el8.7.0+16689+53d59bc2.x86_64.rpm
  • | nscd | - | 28 | - | - | - | nscd-2.28-211.el8.x86_64.rpm
    nscd | - | 28 | nscd | / | /sbin/nologin | "NSCD Daemon" | nscd-2.28-211.el8.x86_64.rpm
  • | tomcat | - | 91 | - | - | - | pki-servlet-engine-9.0.50-1.module+el8.7.0+15761+f86c9a56.noarch.rpm
    tomcat | - | 91 | tomcat | /usr/share/tomcat | /sbin/nologin | "Apache Tomcat" | pki-servlet-engine-9.0.50-1.module+el8.7.0+15761+f86c9a56.noarch.rpm
  • | pkiuser | - | 17 | - | - | - | idm-pki-server-10.12.0-4.module+el8.7.0+16126+c5918a27.noarch.rpm
    pkiuser | - | 17 | pkiuser | /usr/share/pki | /sbin/nologin | "Certificate System" | idm-pki-server-10.12.0-4.module+el8.7.0+16126+c5918a27.noarch.rpm
  • | dirsrv | - | 389 | - | - | - | 389-ds-base-1.4.3.30-6.module+el8.7.0+16373+1a59bba2.x86_64.rpm
    dirsrv | - | 389 | dirsrv | /usr/share/dirsrv | /sbin/nologin | "user for 389-ds-base" | 389-ds-base-1.4.3.30-6.module+el8.7.0+16373+1a59bba2.x86_64.rpm
  • | varnish | - | - | - | - | - | varnish-6.0.8-1.module+el8.5.0+14089+03a0c2cc.1.x86_64.rpm
    varnish | - | - | varnish | /var/lib/varnish | /sbin/nologin | "Varnish Cache" | varnish-6.0.8-1.module+el8.5.0+14089+03a0c2cc.1.x86_64.rpm
  • | haclient | - | 189 | - | - | - | pacemaker-libs-2.1.4-5.el8.x86_64.rpm
    hacluster | - | 189 | haclient | - | /sbin/nologin | "cluster user" | pacemaker-libs-2.1.4-5.el8.x86_64.rpm
  • | geoclue | - | - | - | - | - | geoclue2-2.5.5-2.el8.x86_64.rpm
    geoclue | - | - | geoclue | /var/lib/geoclue | /sbin/nologin | "User for geoclue" | geoclue2-2.5.5-2.el8.x86_64.rpm
  • | flatpak | - | - | - | - | - | flatpak-1.10.7-1.el8.x86_64.rpm
    flatpak | - | - | flatpak | / | /sbin/nologin | "User for flatpak system helper" | flatpak-1.10.7-1.el8.x86_64.rpm
  • | cockpit-ws | - | - | - | - | - | cockpit-ws-276.1-1.el8.x86_64.rpm
    cockpit-ws | - | - | cockpit-ws | /nonexisting | /sbin/nologin | "User for cockpit web service" | cockpit-ws-276.1-1.el8.x86_64.rpm
  • | cockpit-wsinstance | - | - | - | - | - | cockpit-ws-276.1-1.el8.x86_64.rpm
    cockpit-wsinstance | - | - | cockpit-wsinstance | /nonexisting | /sbin/nologin | "User for cockpit-ws instances" | cockpit-ws-276.1-1.el8.x86_64.rpm
  • | abrt | - | 173 | - | - | - | abrt-2.10.9-21.el8.x86_64.rpm
    abrt | - | 173 | abrt | /etc/abrt | /sbin/nologin | - | abrt-2.10.9-21.el8.x86_64.rpm
    gdm | - | 42 | - | /var/lib/gdm | /sbin/nologin | - | gdm-40.0-24.el8.x86_64.rpm
  • | wireshark | - | - | - | - | - | wireshark-cli-2.6.2-15.el8.x86_64.rpm
  • | usbmon | - | - | - | - | - | wireshark-cli-2.6.2-15.el8.x86_64.rpm
  • | debuginfod | - | - | - | - | - | elfutils-debuginfod-0.187-4.el8.x86_64.rpm
    debuginfod | - | - | debuginfod | /var/cache/debuginfod | /sbin/nologin | "elfutils debuginfo server" | elfutils-debuginfod-0.187-4.el8.x86_64.rpm
    gnome-initial-setup | - | - | - | /run/gnome-initial-setup/ | /sbin/nologin | - | gnome-initial-setup-3.28.0-11.el8.x86_64.rpm
  • | stap-server | - | 155 | - | - | - | gcc-toolset-11-systemtap-server-4.5-6.el8.x86_64.rpm
    stap-server | - | 155 | stap-server | /opt/rh/gcc-toolset-11/root/var/lib/stap-server | /sbin/nologin | "Systemtap Compile Server" | gcc-toolset-11-systemtap-server-4.5-6.el8.x86_64.rpm
  • | ldap | - | 55 | - | - | - | nss-pam-ldapd-0.9.9-5.el8.x86_64.rpm
    nslcd | - | 65 | ldap | / | /sbin/nologin | "LDAP Client User" | nss-pam-ldapd-0.9.9-5.el8.x86_64.rpm
  • | vhostmd | - | 112 | - | - | - | vhostmd-1.1-5.el8.x86_64.rpm
    vhostmd | - | 112 | vhostmd | /usr/share/vhostmd | /sbin/nologin | "Virtual Host Metrics Daemon" | vhostmd-1.1-5.el8.x86_64.rpm
  • | mailman | - | 41 | - | - | - | mailman-2.1.29-12.module+el8.5.0+13466+327eb9f3.2.x86_64.rpm
    mailman | - | 41 | 41 | /usr/lib/mailman | /sbin/nologin | "GNU Mailing List Manager" | mailman-2.1.29-12.module+el8.5.0+13466+327eb9f3.2.x86_64.rpm
  • | saned | - | - | - | - | - | sane-backends-daemon-1.0.27-22.el8.x86_64.rpm
    saned | - | - | saned | /usr/share/sane | /sbin/nologin | "SANE scanner daemon user" | sane-backends-daemon-1.0.27-22.el8.x86_64.rpm
  • | frrvty | - | - | - | - | - | frr-7.5.1-4.el8.x86_64.rpm
  • | frr | - | - | - | - | - | frr-7.5.1-4.el8.x86_64.rpm
    frr | - | - | frr | /var/run/frr | /sbin/nologin | "FRRouting suite" | frr-7.5.1-4.el8.x86_64.rpm
  • | power | - | - | - | - | - | thermald-2.5-3.el8.x86_64.rpm
  • | systemd-journal-remote | - | - | - | - | - | systemd-journal-remote-239-68.el8.x86_64.rpm
    systemd-journal-remote | - | - | systemd-journal-remote | /var/log/journal/remote | /sbin/nologin | "Journal Remote" | systemd-journal-remote-239-68.el8.x86_64.rpm
  • | tang | - | - | - | - | - | tang-7-6.el8.x86_64.rpm
    tang | - | - | tang | /var/cache/tang | /sbin/nologin | "Tang Network Presence Daemon user" | tang-7-6.el8.x86_64.rpm
  • | squid | - | 23 | - | - | - | squid-4.15-3.module+el8.6.0+16749+7b6feaf0.2.x86_64.rpm
    squid | - | 23 | 23 | /var/spool/squid | /sbin/nologin | - | squid-4.15-3.module+el8.6.0+16749+7b6feaf0.2.x86_64.rpm
  • | pesign | - | - | - | - | - | pesign-0.112-26.el8.x86_64.rpm
    pesign | - | - | pesign | /run/pesign | /sbin/nologin | "Group for the pesign signing daemon" | pesign-0.112-26.el8.x86_64.rpm
  • | memcached | - | - | - | - | - | memcached-1.5.22-2.el8.x86_64.rpm
    memcached | - | - | memcached | /run/memcached | /sbin/nologin | "Memcached daemon" | memcached-1.5.22-2.el8.x86_64.rpm
  • | dhcpd | - | 177 | - | - | - | dhcp-server-4.3.6-48.el8.x86_64.rpm
    dhcpd | - | 177 | dhcpd | - | /sbin/nologin | "DHCP server" | dhcp-server-4.3.6-48.el8.x86_64.rpm
  • | avahi-autoipd | - | 170 | - | - | - | avahi-autoipd-0.7-20.el8.x86_64.rpm
    avahi-autoipd | - | 170 | avahi-autoipd | /var/lib/avahi-autoipd | /sbin/nologin | "Avahi IPv4LL Stack" | avahi-autoipd-0.7-20.el8.x86_64.rpm
  • | arpwatch | - | 77 | - | - | - | arpwatch-2.1a15-44.el8.x86_64.rpm
    arpwatch | - | 77 | 77 | /var/lib/arpwatch | /sbin/nologin | - | arpwatch-2.1a15-44.el8.x86_64.rpm
  • | tcpdump | - | 72 | - | - | - | tcpdump-4.9.3-3.el8.x86_64.rpm
    tcpdump | - | 72 | 72 | / | /sbin/nologin | - | tcpdump-4.9.3-3.el8.x86_64.rpm
  • | radvd | - | 75 | - | - | - | radvd-2.17-15.el8.x86_64.rpm
    radvd | - | 75 | radvd | / | /sbin/nologin | "radvd user" | radvd-2.17-15.el8.x86_64.rpm
  • | haproxy | - | - | - | - | - | haproxy-1.8.27-5.el8.x86_64.rpm
    haproxy | - | - | haproxy | /var/lib/haproxy | /sbin/nologin | "haproxy" | haproxy-1.8.27-5.el8.x86_64.rpm
    ident | - | 98 | - | / | /sbin/nologin | - | authd-1.4.4-5.el8_0.1.x86_64.rpm
  • | uuidd | - | - | - | - | - | uuidd-2.32.1-38.el8.x86_64.rpm
    uuidd | - | - | uuidd | /var/lib/libuuid | /sbin/nologin | "UUID generator helper daemon" | uuidd-2.32.1-38.el8.x86_64.rpm
  • | slocate | - | 21 | - | - | - | mlocate-0.26-20.el8.x86_64.rpm
  • | grafana | - | - | - | - | - | grafana-7.5.15-3.el8.x86_64.rpm
    grafana | - | - | grafana | /usr/share/grafana | /sbin/nologin | "grafana user account" | grafana-7.5.15-3.el8.x86_64.rpm
  • | pcpqa | - | - | - | - | - | pcp-testsuite-5.3.7-7.el8.x86_64.rpm
    pcpqa | - | - | pcpqa | /var/lib/pcp/testsuite | /bin/bash | "PCP Quality Assurance" | pcp-testsuite-5.3.7-7.el8.x86_64.rpm
  • | mysql | - | 27 | - | - | - | mysql-server-8.0.30-1.module+el8.6.0+16523+5cb0e868.x86_64.rpm
    mysql | - | 27 | mysql | /var/lib/mysql | /sbin/nologin | "MySQL Server" | mysql-server-8.0.30-1.module+el8.6.0+16523+5cb0e868.x86_64.rpm
  • | dnsmasq | - | - | - | - | - | dnsmasq-2.79-24.el8.x86_64.rpm
    dnsmasq | - | - | dnsmasq | /var/lib/dnsmasq | /usr/sbin/nologin | "Dnsmasq DHCP and DNS server" | dnsmasq-2.79-24.el8.x86_64.rpm

Here is a list of users & groups created by RPMs in RHEL 9.1:

USERGROUPUIDGIDHOMESHELLDESCRIPTIONPACKAGE
  • | utmp | - | 22 | - | - | - | libutempter-1.2.1-6.el9.x86_64.rpm
  • | utempter | - | 35 | - | - | - | libutempter-1.2.1-6.el9.x86_64.rpm
  • | input | - | - | - | - | - | systemd-250-12.el9_1.x86_64.rpm
  • | kvm | - | 36 | - | - | - | systemd-250-12.el9_1.x86_64.rpm
  • | render | - | - | - | - | - | systemd-250-12.el9_1.x86_64.rpm
  • | systemd-journal | - | 190 | - | - | - | systemd-250-12.el9_1.x86_64.rpm
  • | systemd-coredump | - | - | - | - | - | systemd-250-12.el9_1.x86_64.rpm
    systemd-coredump | - | - | systemd-coredump | / | /sbin/nologin | "systemd Core Dumper" | systemd-250-12.el9_1.x86_64.rpm
  • | dbus | - | 81 | - | - | - | dbus-broker-28-7.el9.x86_64.rpm
    dbus | - | 81 | 81 | / | /sbin/nologin | "System message bus" | dbus-broker-28-7.el9.x86_64.rpm
  • | tss | - | 59 | - | - | - | tpm2-tss-3.0.3-8.el9.x86_64.rpm
    tss | - | 59 | tss | /dev/null | /sbin/nologin | "Account used for TPM access" | tpm2-tss-3.0.3-8.el9.x86_64.rpm
  • | polkitd | - | - | - | - | - | polkit-0.117-10.el9_0.x86_64.rpm
    polkitd | - | - | polkitd | / | /sbin/nologin | "User for polkitd" | polkit-0.117-10.el9_0.x86_64.rpm
  • | postdrop | - | 90 | - | - | - | postfix-3.5.9-19.el9.x86_64.rpm
  • | postfix | - | 89 | - | - | - | postfix-3.5.9-19.el9.x86_64.rpm
  • | mail | - | 12 | - | - | - | postfix-3.5.9-19.el9.x86_64.rpm
    postfix | - | 89 | postfix | /var/spool/postfix | /sbin/nologin | - | postfix-3.5.9-19.el9.x86_64.rpm
  • | apache | - | 48 | - | - | - | httpd-filesystem-2.4.53-7.el9.noarch.rpm
    apache | - | 48 | apache | /usr/share/httpd | /sbin/nologin | "Apache" | httpd-filesystem-2.4.53-7.el9.noarch.rpm
  • | printadmin | - | - | - | - | - | samba-common-4.16.4-101.el9.noarch.rpm
  • | ssh_keys | - | - | - | - | - | openssh-8.7p1-24.el9_1.x86_64.rpm
  • | unbound | - | - | - | - | - | unbound-libs-1.16.2-2.el9.x86_64.rpm
    unbound | - | - | unbound | /etc/unbound | /sbin/nologin | "Unbound DNS resolver" | unbound-libs-1.16.2-2.el9.x86_64.rpm
  • | qat | - | - | - | - | - | qatlib-22.07.0-1.el9.x86_64.rpm
  • | libstoragemgmt | - | - | - | - | - | libstoragemgmt-1.9.3-1.el9.x86_64.rpm
    libstoragemgmt | - | - | libstoragemgmt | /var/run/lsm | /sbin/nologin | "daemon account for libstoragemgmt" | libstoragemgmt-1.9.3-1.el9.x86_64.rpm
  • | bacula | - | 133 | - | - | - | bacula-common-11.0.1-5.el9.x86_64.rpm
    bacula | - | 133 | bacula | /var/spool/bacula | /sbin/nologin | "Bacula Backup System" | bacula-common-11.0.1-5.el9.x86_64.rpm
  • | gluster | - | - | - | - | - | glusterfs-6.0-57.4.el9.x86_64.rpm
    gluster | - | - | gluster | /run/gluster | /sbin/nologin | "GlusterFS daemons" | glusterfs-6.0-57.4.el9.x86_64.rpm
  • | rpc | - | 32 | - | - | - | rpcbind-1.2.6-5.el9.x86_64.rpm
    rpc | - | 32 | rpc | /var/lib/rpcbind | /sbin/nologin | "Rpcbind Daemon" | rpcbind-1.2.6-5.el9.x86_64.rpm
  • | chrony | - | - | - | - | - | chrony-4.2-1.el9.x86_64.rpm
    chrony | - | - | chrony | /var/lib/chrony | /sbin/nologin | - | chrony-4.2-1.el9.x86_64.rpm
  • | saslauth | - | 76 | - | - | - | cyrus-sasl-2.1.27-20.el9.x86_64.rpm
    saslauth | - | - | saslauth | /run/saslauthd | /sbin/nologin | "Saslauthd user" | cyrus-sasl-2.1.27-20.el9.x86_64.rpm
  • | nginx | - | - | - | - | - | nginx-filesystem-1.20.1-13.el9.noarch.rpm
    nginx | - | - | nginx | /var/lib/nginx | /sbin/nologin | "Nginx web server" | nginx-filesystem-1.20.1-13.el9.noarch.rpm
  • | pkcs11 | - | - | - | - | - | opencryptoki-libs-3.18.0-4.el9.x86_64.rpm
  • | radiusd | - | 95 | - | - | - | freeradius-3.0.21-34.el9.x86_64.rpm
    radiusd | - | 95 | radiusd | /var/lib/radiusd | /sbin/nologin | "radiusd user" | freeradius-3.0.21-34.el9.x86_64.rpm
  • | postgres | - | 26 | - | - | - | postgresql-server-13.7-1.el9_0.x86_64.rpm
    postgres | - | 26 | postgres | /var/lib/pgsql | /bin/bash | "PostgreSQL Server" | postgresql-server-13.7-1.el9_0.x86_64.rpm
  • | sshd | - | 74 | - | - | - | openssh-server-8.7p1-24.el9_1.x86_64.rpm
    sshd | - | 74 | sshd | /usr/share/empty.sshd | /sbin/nologin | "Privilege-separated SSH" | openssh-server-8.7p1-24.el9_1.x86_64.rpm
  • | dip | - | 40 | - | - | - | ppp-2.4.9-5.el9.x86_64.rpm
  • | rtkit | - | 172 | - | - | - | rtkit-0.11-28.el9.x86_64.rpm
    rtkit | - | 172 | rtkit | /proc | /sbin/nologin | "RealtimeKit" | rtkit-0.11-28.el9.x86_64.rpm
  • | ods | - | - | - | - | - | softhsm-2.6.1-7.el9.2.x86_64.rpm
    ods | - | - | ods | /var/lib/softhsm | /sbin/nologin | "softhsm private keys owner" | softhsm-2.6.1-7.el9.2.x86_64.rpm
  • | mailnull | - | 47 | - | - | - | sendmail-8.16.1-10.el9.x86_64.rpm
    mailnull | - | 47 | mailnull | /var/spool/mqueue | /sbin/nologin | - | sendmail-8.16.1-10.el9.x86_64.rpm
  • | smmsp | - | 51 | - | - | - | sendmail-8.16.1-10.el9.x86_64.rpm
    smmsp | - | 51 | smmsp | /var/spool/mqueue | /sbin/nologin | - | sendmail-8.16.1-10.el9.x86_64.rpm
  • | dovecot | - | 97 | - | - | - | dovecot-2.3.16-7.el9.x86_64.rpm
    dovecot | - | 97 | dovecot | /usr/libexec/dovecot | /sbin/nologin | "Dovecot IMAP server" | dovecot-2.3.16-7.el9.x86_64.rpm
  • | dovenull | - | - | - | - | - | dovecot-2.3.16-7.el9.x86_64.rpm
    dovenull | - | - | dovenull | /usr/libexec/dovecot | /sbin/nologin | "Dovecot - unauthorized user" | dovecot-2.3.16-7.el9.x86_64.rpm
  • | qemu | - | 107 | - | - | - | qemu-kvm-common-7.0.0-13.el9.x86_64.rpm
    qemu | - | 107 | qemu | / | /sbin/nologin | "qemu user" | qemu-kvm-common-7.0.0-13.el9.x86_64.rpm
  • | dnsmasq | - | - | - | - | - | dnsmasq-2.85-5.el9.x86_64.rpm
    dnsmasq | - | - | dnsmasq | /var/lib/dnsmasq | /sbin/nologin | "Dnsmasq DHCP and DNS server" | dnsmasq-2.85-5.el9.x86_64.rpm
  • | setroubleshoot | - | - | - | - | - | setroubleshoot-server-3.3.28-4.el9.x86_64.rpm
    setroubleshoot | - | - | setroubleshoot | /var/lib/setroubleshoot | /sbin/nologin | "SELinux troubleshoot server" | setroubleshoot-server-3.3.28-4.el9.x86_64.rpm
  • | clevis | - | - | - | - | - | clevis-18-106.el9.x86_64.rpm
    clevis | - | - | clevis | /var/cache/clevis | /usr/sbin/nologin | "Clevis Decryption Framework | unprivileged | user" | clevis-18-106.el9.x86_64.rpm
  • | avahi | - | 70 | - | - | - | avahi-0.8-12.el9.x86_64.rpm
    avahi | - | 70 | avahi | /var/run/avahi-daemon | /sbin/nologin | "Avahi mDNS/DNS-SD Stack" | avahi-0.8-12.el9.x86_64.rpm
    garb | - | - | - | /dev/null | /sbin/nologin | "Galera Arbitrator Daemon" | galera-26.4.11-1.el9_0.x86_64.rpm
    cyrus | - | 76 | mail | /var/lib/imap | /sbin/nologin | "Cyrus IMAP Server" | cyrus-imapd-3.4.1-7.el9.x86_64.rpm
  • | pegasus | - | 65 | - | - | - | tog-pegasus-libs-2.14.1-64.el9.x86_64.rpm
    pegasus | - | 66 | pegasus | /var/lib/Pegasus | /sbin/nologin | "tog-pegasus OpenPegasus WBEM/CIM services" | tog-pegasus-libs-2.14.1-64.el9.x86_64.rpm
  • | libvirtdbus | - | - | - | - | - | libvirt-dbus-1.4.1-5.el9.x86_64.rpm
    libvirtdbus | - | - | libvirtdbus | / | /sbin/nologin | "Libvirt D-Bus bridge" | libvirt-dbus-1.4.1-5.el9.x86_64.rpm
  • | sssd | - | - | - | - | - | sssd-common-2.7.3-4.el9.x86_64.rpm
    sssd | - | - | sssd | / | /sbin/nologin | "User for sssd" | sssd-common-2.7.3-4.el9.x86_64.rpm
  • | redis | - | - | - | - | - | redis-6.2.7-1.el9.x86_64.rpm
    redis | - | - | redis | /var/lib/redis | /sbin/nologin | "Redis Database Server" | redis-6.2.7-1.el9.x86_64.rpm
  • | colord | - | - | - | - | - | colord-1.4.5-4.el9.x86_64.rpm
    colord | - | - | colord | /var/lib/colord | /sbin/nologin | "User for colord" | colord-1.4.5-4.el9.x86_64.rpm
  • | wbpriv | - | 88 | - | - | - | samba-winbind-4.16.4-101.el9.x86_64.rpm
  • | geoclue | - | - | - | - | - | geoclue2-2.5.7-5.el9.x86_64.rpm
    geoclue | - | - | geoclue | /var/lib/geoclue | /sbin/nologin | "User for geoclue" | geoclue2-2.5.7-5.el9.x86_64.rpm
  • | tlog | - | - | - | - | - | tlog-12.1-2.el9.x86_64.rpm
    tlog | - | - | tlog | /var/run/tlog | /sbin/nologin | "Tlog terminal I/O logger" | tlog-12.1-2.el9.x86_64.rpm
  • | kdcproxy | - | - | - | - | - | ipa-server-common-4.10.0-6.el9.noarch.rpm
    kdcproxy | - | - | kdcproxy | / | /sbin/nologin | "IPA KDC Proxy User" | ipa-server-common-4.10.0-6.el9.noarch.rpm
  • | ipaapi | - | - | - | - | - | ipa-server-common-4.10.0-6.el9.noarch.rpm
    ipaapi | - | - | ipaapi | / | /sbin/nologin | "IPA Framework User" | ipa-server-common-4.10.0-6.el9.noarch.rpm
  • | pipewire | - | - | - | - | - | pipewire-0.3.47-2.el9.x86_64.rpm
    pipewire | - | - | pipewire | /var/run/pipewire | /sbin/nologin | "PipeWire System Daemon" | pipewire-0.3.47-2.el9.x86_64.rpm
  • | pulse-access | - | - | - | - | - | pulseaudio-15.0-2.el9.x86_64.rpm
  • | pulse-rt | - | - | - | - | - | pulseaudio-15.0-2.el9.x86_64.rpm
  • | pulse | - | 171 | - | - | - | pulseaudio-15.0-2.el9.x86_64.rpm
    pulse | - | 171 | pulse | /var/run/pulse | /sbin/nologin | "PulseAudio System Daemon" | pulseaudio-15.0-2.el9.x86_64.rpm
  • | brlapi | - | - | - | - | - | brlapi-0.8.2-4.el9.x86_64.rpm
  • | festival | - | - | - | - | - | festival-2.5.0-17.el9.x86_64.rpm
    festival | - | - | festival | / | /sbin/nologin | "festival Daemon" | festival-2.5.0-17.el9.x86_64.rpm
  • | sfcb | - | - | - | - | - | sblim-sfcb-1.4.9-25.el9.x86_64.rpm
  • | systemd-resolve | - | 193 | - | - | - | systemd-resolved-250-12.el9_1.x86_64.rpm
    systemd-resolve | - | 193 | systemd-resolve | / | /sbin/nologin | "systemd Resolver" | systemd-resolved-250-12.el9_1.x86_64.rpm
  • | libvirt | - | - | - | - | - | libvirt-daemon-8.5.0-7.el9_1.x86_64.rpm
  • | named | - | 25 | - | - | - | bind-9.16.23-5.el9_1.x86_64.rpm
    named | - | 25 | named | /var/named | /sbin/nologin | "Named" | bind-9.16.23-5.el9_1.x86_64.rpm
  • | keylime | - | - | - | - | - | keylime-base-6.5.0-1.el9.x86_64.rpm
    keylime | - | - | keylime | /var/lib/keylime | /usr/sbin/nologin | "Keylime unprivileged user" | keylime-base-6.5.0-1.el9.x86_64.rpm
  • | cockpit-ws | - | - | - | - | - | cockpit-ws-276.1-1.el9.x86_64.rpm
    cockpit-ws | - | - | cockpit-ws | /nonexisting | /sbin/nologin | "User for cockpit web service" | cockpit-ws-276.1-1.el9.x86_64.rpm
  • | cockpit-wsinstance | - | - | - | - | - | cockpit-ws-276.1-1.el9.x86_64.rpm
    cockpit-wsinstance | - | - | cockpit-wsinstance | /nonexisting | /sbin/nologin | "User for cockpit-ws instances" | cockpit-ws-276.1-1.el9.x86_64.rpm
    fapolicyd | - | - | - | /var/lib/fapolicyd | /sbin/nologin | "Application Whitelisting Daemon" | fapolicyd-1.1.3-102.el9.x86_64.rpm
  • | flatpak | - | - | - | - | - | flatpak-1.12.7-2.el9.x86_64.rpm
    flatpak | - | - | flatpak | / | /sbin/nologin | "User for flatpak system helper" | flatpak-1.12.7-2.el9.x86_64.rpm
  • | mysql | - | 27 | - | - | - | mariadb-server-10.5.16-2.el9_0.x86_64.rpm
    mysql | - | 27 | mysql | /var/lib/mysql | /sbin/nologin | "MySQL Server" | mariadb-server-10.5.16-2.el9_0.x86_64.rpm
  • | varnish | - | - | - | - | - | varnish-6.6.2-2.el9.x86_64.rpm
    varnish | - | - | varnish | /var/lib/varnish | /sbin/nologin | "Varnish Cache" | varnish-6.6.2-2.el9.x86_64.rpm
  • | rpcuser | - | 29 | - | - | - | nfs-utils-2.5.4-15.el9.x86_64.rpm
    rpcuser | - | 29 | 29 | /var/lib/nfs | /sbin/nologin | "RPC Service User" | nfs-utils-2.5.4-15.el9.x86_64.rpm
  • | pcp | - | - | - | - | - | pcp-5.3.7-7.el9.x86_64.rpm
    pcp | - | - | pcp | /var/lib/pcp | /sbin/nologin | "Performance Co-Pilot" | pcp-5.3.7-7.el9.x86_64.rpm
  • | grafana | - | - | - | - | - | grafana-7.5.15-3.el9.x86_64.rpm
    grafana | - | - | grafana | /usr/share/grafana | /sbin/nologin | "grafana user account" | grafana-7.5.15-3.el9.x86_64.rpm
  • | dirsrv | - | 389 | - | - | - | 389-ds-base-2.1.3-4.el9_1.x86_64.rpm
    dirsrv | - | 389 | dirsrv | /usr/share/dirsrv | /sbin/nologin | "user for 389-ds-base" | 389-ds-base-2.1.3-4.el9_1.x86_64.rpm
  • | wireshark | - | - | - | - | - | wireshark-cli-3.4.10-1.el9.x86_64.rpm
  • | usbmon | - | - | - | - | - | wireshark-cli-3.4.10-1.el9.x86_64.rpm
  • | pcpqa | - | - | - | - | - | pcp-testsuite-5.3.7-7.el9.x86_64.rpm
    pcpqa | - | - | pcpqa | /var/lib/pcp/testsuite | /bin/bash | "PCP Quality Assurance" | pcp-testsuite-5.3.7-7.el9.x86_64.rpm
  • | pesign | - | - | - | - | - | pesign-115-4.el9.x86_64.rpm
    pesign | - | - | pesign | /run/pesign | /sbin/nologin | "Group for the pesign signing daemon" | pesign-115-4.el9.x86_64.rpm
  • | power | - | - | - | - | - | thermald-2.5-3.el9.x86_64.rpm
  • | saned | - | - | - | - | - | sane-backends-daemon-1.0.32-7.el9.x86_64.rpm
    saned | - | - | saned | /usr/share/sane | /sbin/nologin | "SANE scanner daemon user" | sane-backends-daemon-1.0.32-7.el9.x86_64.rpm
  • | memcached | - | - | - | - | - | memcached-1.6.9-7.el9.x86_64.rpm
    memcached | - | - | memcached | / | /sbin/nologin | "memcached daemon" | memcached-1.6.9-7.el9.x86_64.rpm
  • | debuginfod | - | - | - | - | - | elfutils-debuginfod-0.187-5.el9.x86_64.rpm
    debuginfod | - | - | debuginfod | /var/cache/debuginfod | /sbin/nologin | "elfutils debuginfo server" | elfutils-debuginfod-0.187-5.el9.x86_64.rpm
  • | tang | - | - | - | - | - | tang-11-1.el9.x86_64.rpm
    tang | - | - | tang | /var/cache/tang | /sbin/nologin | "Tang Network Presence Daemon user" | tang-11-1.el9.x86_64.rpm
  • | frrvty | - | - | - | - | - | frr-8.2.2-4.el9.x86_64.rpm
  • | frr | - | - | - | - | - | frr-8.2.2-4.el9.x86_64.rpm
    frr | - | - | frr | /var/run/frr | /sbin/nologin | "FRRouting routing suite" | frr-8.2.2-4.el9.x86_64.rpm
  • | systemd-journal-remote | - | - | - | - | - | systemd-journal-remote-250-12.el9_1.x86_64.rpm
    systemd-journal-remote | - | - | systemd-journal-remote | /var/log/journal/remote | /sbin/nologin | "Journal | Remote" | systemd-journal-remote-250-12.el9_1.x86_64.rpm
  • | squid | - | 23 | - | - | - | squid-5.5-3.el9_1.x86_64.rpm
    squid | - | 23 | 23 | /var/spool/squid | /sbin/nologin | - | squid-5.5-3.el9_1.x86_64.rpm
  • | munge | - | - | - | - | - | munge-0.5.13-13.el9.x86_64.rpm
    munge | - | - | munge | /run/munge | /sbin/nologin | "Runs Uid N Gid Emporium" | munge-0.5.13-13.el9.x86_64.rpm
  • | dhcpd | - | 177 | - | - | - | dhcp-server-4.4.2-17.b1.el9.x86_64.rpm
    dhcpd | - | 177 | dhcpd | - | /sbin/nologin | "DHCP server" | dhcp-server-4.4.2-17.b1.el9.x86_64.rpm
  • | lldpd | - | - | - | - | - | lldpd-1.0.4-10.el9.x86_64.rpm
    lldpd | - | - | lldpd | /var/lib/lldpd | /sbin/nologin | "Used by the lldpd daemon" | lldpd-1.0.4-10.el9.x86_64.rpm
  • | sanlock | - | 179 | - | - | - | sanlock-3.8.4-4.el9.x86_64.rpm
    sanlock | - | 179 | 179 | /var/run/sanlock | /sbin/nologin | "sanlock" | sanlock-3.8.4-4.el9.x86_64.rpm
  • | tcpdump | - | 72 | - | - | - | tcpdump-4.99.0-6.el9.x86_64.rpm
    tcpdump | - | 72 | 72 | / | /sbin/nologin | - | tcpdump-4.99.0-6.el9.x86_64.rpm
  • | uuidd | - | - | - | - | - | uuidd-2.37.4-9.el9.x86_64.rpm
    uuidd | - | - | uuidd | /var/lib/libuuid | /sbin/nologin | "UUID generator helper daemon" | uuidd-2.37.4-9.el9.x86_64.rpm
  • | radvd | - | 75 | - | - | - | radvd-2.19-4.el9.x86_64.rpm
    radvd | - | 75 | radvd | / | /sbin/nologin | "radvd user" | radvd-2.19-4.el9.x86_64.rpm
  • | haproxy | - | - | - | - | - | haproxy-2.4.17-3.el9.x86_64.rpm
    haproxy | - | - | haproxy | /var/lib/haproxy | /sbin/nologin | "haproxy" | haproxy-2.4.17-3.el9.x86_64.rpm
  • | nscd | - | 28 | - | - | - | nscd-2.34-40.el9.x86_64.rpm
    nscd | - | 28 | nscd | / | /sbin/nologin | "NSCD Daemon" | nscd-2.34-40.el9.x86_64.rpm
  • | slocate | - | 21 | - | - | - | mlocate-0.26-30.el9.x86_64.rpm
    gdm | - | 42 | - | /var/lib/gdm | /sbin/nologin | - | gdm-40.1-17.el9_1.x86_64.rpm
    gnome-initial-setup | - | - | - | /run/gnome-initial-setup/ | /sbin/nologin | - | gnome-initial-setup-40.4-3.el9.x86_64.rpm
  • | tomcat | - | 91 | - | - | - | pki-servlet-engine-9.0.50-1.el9.noarch.rpm
    tomcat | - | 91 | tomcat | /usr/share/tomcat | /sbin/nologin | "Apache Tomcat" | pki-servlet-engine-9.0.50-1.el9.noarch.rpm
  • | mysql | - | 27 | - | - | - | mysql-server-8.0.30-3.el9_0.x86_64.rpm
    mysql | - | 27 | mysql | /var/lib/mysql | /sbin/nologin | "MySQL Server" | mysql-server-8.0.30-3.el9_0.x86_64.rpm
  • | dnsmasq | - | - | - | - | - | dnsmasq-2.85-5.el9.x86_64.rpm
    dnsmasq | - | - | dnsmasq | /var/lib/dnsmasq | /usr/sbin/nologin | "Dnsmasq DHCP and DNS server" | dnsmasq-2.85-5.el9.x86_64.rpm

Diagnostic Steps

  1. On the matching version RHEL machine switch to a directory with at least 100G of space:

     cd _/path/to/large/volume_
    
  2. Download RHEL DVD iso from https://access.redhat.com/downloads/ to your current directory.

  3. Download and install a basic set of packages and their dependencies required for functional use of chroot:

     yumdownloader --resolve --alldeps --downloaddir ./pkgs redhat-release filesystem setup glibc bash coreutils dnf strace
     dnf install strace -y
     time strace -qfTttvys 192 -e trace=read,execve -o ./rpm-strace-minimal-package-set-filtered-read-execve.txt rpm -iv --root `pwd`/fakeroot ./pkgs/*
    
  4. Obtain a first set of users and groups installed by the basic set of packages:

     grep "read(.*\.rpm>\|execve(.*\(\"/\(usr/sbin\|sbin\)/\(useradd\|adduser\|newusers\|usermod\)\"\|\"/\(usr/sbin\|sbin\)/\(groupadd\|groupmems\|groupmod\)\"\)" ./rpm-strace-minimal-package-set-filtered-read-execve.txt | sed -e "s#^[0-9]\+[ ]\+.*read([0-9]\+<.*/\(.*\.rpm\)>.*#\1#" > ./partial-results-minimal-package-set-grep-read-execve-sed-get-rpm-filename.txt
    
     uniq ./partial-results-minimal-package-set-grep-read-execve-sed-get-rpm-filename.txt | grep execve -B 1 > ./partial-results-minimal-package-set-uniq-grep-execve-B-1.txt 
    
     sed -e "s#^[0-9]\+[ ]\+.*execve(\(\"/\(usr/sbin\|sbin\)/\(useradd\|adduser\|newusers\|usermod\)\"\|\"/\(usr/sbin\|sbin\)/\(groupadd\|groupmems\|groupmod\)\"\).* \[\(.*\)\], \[\"[A-Z_]\+.*#\6#" -e "s#[,]##g" ./partial-results-minimal-package-set-uniq-grep-execve-B-1.txt > ./final-results-minimal-package-set.txt
    
  5. Set up a yum ISO repository:

     cat > ./fakeroot/etc/yum.repos.d/media.repo <<MEDIA.REPO_EOF
     [InstallMedia-BaseOS]
     name=Red Hat Enterprise Linux BaseOS
     mediaid=None
     metadata_expire=-1
     gpgcheck=0
     cost=500
     enabled=1
     baseurl=file:///mnt/rhel_iso/BaseOS/
    
     [InstallMedia-AppStream]
     name=Red Hat Enterprise Linux AppStream
     mediaid=None
     metadata_expire=-1
     gpgcheck=0
     cost=500
     enabled=1
     baseurl=file:///mnt/rhel_iso/AppStream/
     MEDIA.REPO_EOF
     
     chmod 644 ./fakeroot/etc/yum.repos.d/media.repo; \
    
     mkdir -p ./fakeroot/mnt/rhel_iso
    
  6. Get into chroot and mount the ISO:

    • Download chroot-fakeroot.sh and make it executable:

        chmod +x ./chroot-fakeroot.sh
      
      • On RHEL 8:

          mv ./RHEL-8.7.0-20221013.1-x86_64-dvd1.iso ./fakeroot/root/
          ./chroot-fakeroot.sh -r ./fakeroot/
          mount -o loop ~/RHEL-8.7.0-20221013.1-x86_64-dvd1.iso /mnt/rhel_iso/
          cd
        
      • On RHEL 9:

          mv ./RHEL-9.1.0-20221027.3-x86_64-dvd1.iso ./fakeroot/root/
         ./chroot-fakeroot.sh -r ./fakeroot/
          mount -o loop ~/RHEL-9.1.0-20221027.3-x86_64-dvd1.iso /mnt/rhel_iso/
          cd
        
  7. Install all packages under chroot:

     dnf -y module enable \*
    
     time strace -qfTttvys 192 -e trace=read,execve -o yum-strace-filtered-read-execve.txt dnf -y --skip-broken install \*
    
     grep "read(.*\.rpm>\|execve(.*\(\"/\(usr/sbin\|sbin\)/\(useradd\|adduser\|newusers\|usermod\)\"\|\"/\(usr/sbin\|sbin\)/\(groupadd\|groupmems\|groupmod\)\"\)" yum-strace-filtered-read-execve.txt | sed -e "s#^[0-9]\+[ ]\+.*read([0-9]\+<.*/\(.*\.rpm\)>.*#\1#" > partial-results-grep-read-execve-sed-get-rpm-filename.txt
    
     uniq partial-results-grep-read-execve-sed-get-rpm-filename.txt | grep execve -B 1 > partial-results-uniq-grep-execve-B-1.txt
    
     sed -e "s#^[0-9]\+[ ]\+.*execve(\(\"/\(usr/sbin\|sbin\)/\(useradd\|adduser\|newusers\|usermod\)\"\|\"/\(usr/sbin\|sbin\)/\(groupadd\|groupmems\|groupmod\)\"\).* \[\(.*\)\], \[\"[A-Z_]\+.*#\6#" -e "s#[,]##g" partial-results-uniq-grep-execve-B-1.txt > final-results.txt
    
     exit
    
  8. Combine the users and groups added while creating the chroot environment and those installed while running under chroot, as well as adding results for conflicting packages:

    • On RHEL 8:

        cat ./final-results-minimal-package-set.txt > ./full-final-results.txt
      
        cat ./fakeroot/root/final-results.txt >> ./full-final-results.txt
      
        cat >> ./full-final-results.txt <<CONFLICTS_OR_MISSING_RHEL8_EOF
        --
        mysql-server-8.0.30-1.module+el8.6.0+16523+5cb0e868.x86_64.rpm
        "/usr/sbin/groupadd" "-g" "27" "-o" "-r" "mysql"
        "/usr/sbin/useradd" "-M" "-N" "-g" "mysql" "-o" "-r" "-d" "/var/lib/mysql" "-s" "/sbin/nologin" "-c" "MySQL Server" "-u" "27" "mysql"
        --
        dnsmasq-2.79-24.el8.x86_64.rpm
        "/usr/sbin/groupadd" "-r" "dnsmasq"
        "useradd" "-r" "-g" "dnsmasq" "-d" "/var/lib/dnsmasq" "-s" "/usr/sbin/nologin" "-c" "Dnsmasq DHCP and DNS server" "dnsmasq"
        CONFLICTS_OR_MISSING_RHEL8_EOF
      
    • On RHEL 9:

        cat >> ./full-final-results.txt <<CONFLICTS_OR_MISSING_RHEL9_EOF
        --
        mysql-server-8.0.30-3.el9_0.x86_64.rpm
        "/usr/sbin/groupadd" "-g" "27" "-o" "-r" "mysql"
        "/usr/sbin/useradd" "-M" "-N" "-g" "mysql" "-o" "-r" "-d" "/var/lib/mysql" "-s" "/sbin/nologin" "-c" "MySQL Server" "-u" "27" "mysql"
        --
        dnsmasq-2.85-5.el9.x86_64.rpm
        "/usr/sbin/groupadd" "-r" "dnsmasq"
        "useradd" "-r" "-g" "dnsmasq" "-d" "/var/lib/dnsmasq" "-s" "/usr/sbin/nologin" "-c" "Dnsmasq DHCP and DNS server" "dnsmasq"
        CONFLICTS_OR_MISSING_RHEL9_EOF
      
  9. Parse the results:

    • Download parse-results.sh and make it executable:

         chmod +x ./parse-results.sh
      
      • On RHEL 8:

           cat full-final-results.txt | ./parse-results.sh > current-results-RHEL-8.7.iso.txt
        
      • On RHEL 9:

           cat full-final-results.txt | ./parse-results.sh > current-results-RHEL-9.1.iso.txt
        
SBR
Components
Category

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.