From 10a6d632f1e2482e4f1e8b5bf5709f88dd4a299c Mon Sep 17 00:00:00 2001 From: Patrick Riehecky Date: Thu, 26 Feb 2026 15:12:20 -0600 Subject: [PATCH] Include example --- docs/static-subid.conf.adoc | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/docs/static-subid.conf.adoc b/docs/static-subid.conf.adoc index b58498c..c48d29f 100644 --- a/docs/static-subid.conf.adoc +++ b/docs/static-subid.conf.adoc @@ -162,6 +162,17 @@ To disable shadow-utils auto-assignment, set *SUB_UID_COUNT* and *SUB_GID_COUNT* Keys read from _/etc/login.defs_ match keys read from the *static-subid* configs. Unknown keys are ignored. +== EXCLUDING SPECIFIC USERS + +You cannot mask a user directly. What you can do is set *SKIP_IF_EXISTS* to true and perform: + +.... +usermod --add-subuid $(id -u ${MASKUSER})-$(id -u ${MASKUSER}) ${MASKUSER} +usermod --add-subgid $(id -u ${MASKUSER})-$(id -u ${MASKUSER}) ${MASKUSER} +.... + +This will setup a single subuid and for the user which matches their existing user id. + == EXAMPLES === Basic Configuration