nss-systemd, libnss_systemd.so.2 — Provide UNIX user and group name resolution for user/group lookup via Varlink
nss-systemd is a plug-in module for the GNU Name Service Switch (NSS)
functionality of the GNU C Library (glibc), providing UNIX user and group name
resolution for services implementing the User/Group Record
Lookup API via Varlink, such as the system and service manager
systemd(1) (for its
DynamicUser= feature, see
This module also ensures that the root and nobody users and groups (i.e. the users/groups with the UIDs/GIDs
0 and 65534) remain resolvable at all times, even if they aren't listed in
/etc/group, or if these files are missing.
This module preferably utilizes systemd-userdbd.service(8) for resolving users and groups, but also works without the service running.
To activate the NSS module, add "
systemd" to the lines starting with
passwd:" and "
It is recommended to place "
systemd" after the "
compat" entry of the
/etc/nsswitch.conf lines so that
/etc/group based mappings take precedence.
Here is an example
/etc/nsswitch.conf file that enables
passwd: compat mymachines systemd group: compat [SUCCESS=merge] mymachines [SUCCESS=merge] systemd shadow: compat hosts: files mymachines resolve [!UNAVAIL=return] dns myhostname networks: files protocols: db files services: db files ethers: db files rpc: db files netgroup: nis