systemd-userdb Mishandled

Bug Report

If any users or groups are defined using the systemd-userdb JSON drop-in files in /usr/lib/userdb, the coreos-assembler is incorrectly generating a user.ign file during image creation that duplicates the settings and causes a failure.

Environment

What operating system is being used to run coreos-assembler? Docker

What operating system is being assembled? Variant of fedora-coreos-config with an extra overlay.d

Is coreos-assembler running in Podman or Docker? Podman

If Podman, is coreos-assembler running privileged or unprivileged? privileged

Expected Behavior

Putting files in /usr/lib/userdb/ should have no effect at all on the ignition file generated for the coreos-assembler output image.

Actual Behavior

A user.ign ignition file is being generated with a passwd section that duplicates the settings from the /usr/lib/userdb of the rootfs during image creation.

Reproduction Steps

1. Add user and group JSON files for systemd-userdb with UID=1000, GID=1000 to the /usr/lib/userdb/ folder via overlay.
2. Build a qcow2 image
3. Attempt to run the qcow2 image in a VM
4. See the dracut emergency shell ignition errors about creating the users/groups

Other Information

Start by reproducing image creation with JSON user and group files overlaid in /usr/lib/userdb, then inspect the generated user.ign and the image-build path that creates it. Done means files in /usr/lib/userdb no longer produce a duplicate passwd section and the resulting qcow2 image boots without ignition user or group errors.