Merge branch 'move-tss-to-etc' into 'main'

Move the `tss` group to `/etc` so it can be mutated

See merge request fedora/bootc/base-images!155

minimal/postprocess-conf.yaml

@@ -14,9 +14,14 @@ ignore-removed-users:
   - root
 ignore-removed-groups:
   - root
+# By default users and groups are injected to nss-altfiles
+# which is immutable. This list moves a selected set
+# to /etc/group instead, which is mutable per system
+# and allows local users to become part of these groups.
 etc-group-members:
   - wheel
   - systemd-journal
+  - tss # https://issues.redhat.com/browse/BIFROST-618
   - adm
 
 check-passwd:

tests/rootfs/cases/etc-group

@@ -0,0 +1,6 @@
+#!/bin/bash
+set -xeuo pipefail
+# Verify group members
+getent group tss >/dev/null
+# This one needs to be in /etc
+grep -q tss /etc/group