With all that in place if nspawn host and container payload are up-to-date
enough we have a very simple way to make host users available in containers.
-* systemd-sysusers: pick up passwords from credentials logic, so that users can
- easily set root user pw. enable cred inheriting for root user from PID 1, so
- that for containers we can configure the root pw automatically via nspawn's
- --set-credential= switch. (Also do this for systemd-firstboot)
-
* whenever we receive fds via SCM_RIGHTS make sure none got dropped due to the
reception limit the kernel silently enforces.