[15:29:57] <inflatador>	 Question about our prod UIDs ( https://gerrit.wikimedia.org/r/plugins/gitiles/operations/puppet/+/refs/heads/production/modules/admin/data/data.yaml#5190 ) . Are there any rules about the UID number? Trying to match w/a regex 
[15:30:32] <inflatador>	 I'm probably gonna slop and match anything between 1000-50000, but it seems possible someone could choose a higher UID
[15:34:53] <cdanis>	 https://wikitech.wikimedia.org/wiki/UID
[15:35:45] <inflatador>	 perfect, thanks cdanis !
[15:41:51] <mutante>	 inflatador: you could add it to modules/wmflib/types/ to validate UIDs
[15:46:23] <taavi>	 please note that T355663 will likely change the ranges
[15:46:24] <stashbot>	 T355663: Allocate more available UNIX UIDs for human users - https://phabricator.wikimedia.org/T355663
[15:55:24] <inflatador>	 Thanks taavi , I subscribed. I'm curious why there are such big gaps between UIDs, is that from users that have been off-boarded?
[15:59:58] <mutante>	 UIDs of human users in production are matched to the UID in LDAP. And that is assigned whenever their wikitech (previously) user was created
[16:00:32] <mutante>	 for the system users, they should all move to use systemd::syuser ideally, and then also move to UIDs over 900
[16:01:29] <moritzm>	 only use systemd::sysuser if the role is only used on bookworm, though
[16:01:49] <moritzm>	 there's some glibc bugs which get hit by systemd-sysuser in overly large groups