UID 65534 & user nobody

English Install/Boot/Login
1

On this old HP Compaq CMT.
Every day when I start it I get references to ‘/run/user/65534’ (which doesn’t exist, and ‘starting a session c1 for user nobody’
I can’t seem to find out what I need to do to make it stop.

Interesting enough, IF I immediately do a restart, both UID 65534 & user nobody disappear from the boot process, and do not show up doing

sudo journalctl -b _UID=65534

This leads me to believe something is starting them, but not stopping them before the boot process completes. **My opinion anyway!
**
It is only on this machine. My laptop and the HP AIO don’t have UID 65534 & nobody in the boot process.

The

sudo journalctl -b _UID=65534

when 65534 & nobody show in hte boot process has a line telling me ‘klipper.desktop’ is executable and to remove that attribute (Which I HAVE DONE NOW).

I can’t find a way to filter the log to only display 65534 & nobody to give more precise information, and I don’t have output for the last

sudo journalctl -b _UID=65534

.(My BAD)
They are there, but the references to them are all over the place(very confusing.)

2

Hi
Might be a cron job running at start, check in the /etc/cron* directories…

3

Thanks for your response.

I have looked at cron before and it still has nothing in cron.d , cron.monthly, cron.weekly, cron.hourly,

There are some things related to chrome & Brave browser in cron.daily all dated recently,
but this ‘problem has been there every daily start up since earlier this year, or before.

If I shutdown or reboot it takes 2-3 minutes or more to complete the process.

If I reboot after initial start , do what need to do, the shutdown process is less than 20 seconds.

Is it possible a cron or cron like job is running at start, and not letting loose things?

4

Hi
It will be those cron jobs, I remove them all… I can update chrome when I need to, plus remove the repos… I would move them temporarily to confirm that is the culprit.

5

Thanks, I will give that a try.
But why remove the repos? Does that mena manual updates to the chrome and brave browsers?

An Aside>> Since my initial start this evening, I have rebooted twice and shut down and restarted twice. UID 65534 & nobody only show up in my initial evening start up.

6

Hi
A daily time for cron more than likely or boot and only once if it’s the same day… the cron jobs update in the background, not something I like it doing. Likewise I disable else on a refresh it’s talking to google as well.

7

But why remove the repos?
If I leave the repos, will they re-create the cron daily jobs?
Regardless, I won’t know how removing the cron jobs

Please, remember I am still mostly a complete dummy with Linux.

8

Hi
AFAIK yes, so don’t disable the repos, just move the cron jobs and see if that helps.

9

OK, thanks.
I won’t know if just removing the cron jobs will help until tomorrow evening.
If not, I will disable the repos and see it that helps.
And if it does, i’ll have to learn how to do manual updates.

10

Hi
Just create a local plain rpm repo…? Once repos are added, the gpg keys should be on your system…

I just did this as I have a local repo for an assortment of files I download and also build locally.


#!/usr/bin/bash

# Check with rpm -q --qf "%{version}-%{release} %{summary}
" gpg-pubkey-d38b4796-570c8cd3 gpg-pubkey-7fac5991-4615767f
# d38b4796-570c8cd3 Google Inc. (Linux Packages Signing Authority) <linux-packages-keymaster@google.com> public key
# 7fac5991-4615767f Google, Inc. Linux Package Signing Key <linux-packages-keymaster@google.com> public key


wget -O /data/repositories/local_rpms/google-chrome-stable_current_x86_64.rpm https://dl.google.com/linux/direct/google-chrome-stable_current_x86_64.rpm
wget -O /data/repositories/local_rpms/google-earth-pro-stable-current.x86_64.rpm https://dl.google.com/dl/earth/client/current/google-earth-pro-stable-current.x86_64.rpm
11

That is WAY over my head! I will study on it.
I just hope removing those daily cron jobs works.

12

Hi
The wget command is just downloading the file, the -O option is to name the downloaded file…

13

That is WAY over my head! I will study on it.

And you can use YaST to easily add (any) local folder as a local repository. Just create one and go to YaST - Software Repositories - Add - “Local Directory” - there you are. Then you can use Malcolm’s wget command to that folder.

14

Nope, It wasn’t the cron jobs, they remain removed from the cron.daily directory.

I will disable the repos for the browsers, but personally I don’t hold hope that that is it either.

Thanks to others for your responses. Anything at this point is worth a try.

15

UID65534 Saga continues…
I did an update and chrome and brave browsers were in the update.

**Then I rebooted. UID_65534 & nobody where to be found in the boot process nor a journalctl search for them.
**
I looked in the /etc/cron.daily directory and the update added their files back in.

I still think it is something else not configured right, and I will either have to live with 65534 & nobody lurking around, OR be gutsy, and do a fresh install of Leap 15.3.

PS>> I will remove the cron jobs again, and will still try disabling those browser repos just to satisfy myself they are not the problem.

16

cron jobs removed, disabled the browser repos.
UID 65534 still in the FIRST boot process of the day. user ‘nobody’ was not (this time).

So, I am concluding that there is something else mis-configured causing UID65534 to make it’s appearance on first start up of the day, and have no idea how to find out what!

I have only written one shell script in my recent time on Linux, and I wouldn’t know how to write & implement a script like @malcolmlewis’s example in earlier responses to this topic.

Guess I am stuck with it, until I get frustrated and o a fresh install of Leap 15.3 on this old HP Compaq.

17

Hi
If you fire up YaST and look at all the services that are enabled and run, perhaps can work out what one it is…

18

The only thing I see in the list that FAILED is the Postfix Mail Transport Agent. It is an ‘On Boot’ service.
I also see there is a 'PC/SC Smart Card Daemon (On Demand and Active) in the list. I do not have a Smart card in this machine.

Every thing else looks kosher to me, but I may be wrong(as usual).

19

Hi
Are you only using IPv4 and disabled IPv6? The smart card I disable and mask.

20

Yes, IPv4, IPv6 is disabled. Is Postfix Mail Transprot Agent dependent on one or the other?(IT IS INSTALLED) or Both? <<<< I’ll do a search to see if I can answer that!
I can disable the smart card, but I will have to look in to masking it’s service.

If it makes a difference I only use Thunderbird when I mail or receive on this machine. So I have not set up anything else, just what the Leap installer put in.