WSL machine fails to boot when `LIMA_CIDATA_UID=1000`

[arixmkii]

Description

There is code which reads UID using id tool on Windows

lima/pkg/osutil/user.go

Line 116 in 3569ecb

idu, err := call(ctx, []string{"id", "-u"})

, which normally maps to cygwin/msys2 version of the utility, which in turn outputs some number outside of regular Linux user range. If id utility is missing in path, then fallback takes place and sets uid to 1000

lima/pkg/osutil/user.go

Line 94 in 3569ecb

fallbackUid = 1000

and WSL machine fails to boot.

This is a regression in 2.1.2 and was working for 2.1.1 (I haven't rechecked 2.1.1 now, but it was working around time the release was cut) - machine was able to boot when uid/gid were 1000/1000.

I believe I found that it failed at least once with 2.1.1 and additional detail would be that it started with WSL 2.7.3. So it might be a regression caused by WSL version bump.

[arixmkii]

Really ugly error output, which didn't help me at all and I had to debug it manually anyway, but may be it will be helpful for someone more knowledgeable how machines are provisioned.

time="2026-06-06T12:33:04Z" level=info msg="[hostagent] Driver stopped due to error: \"error running wslCommand that executes boot.sh ([wsl.exe -d lima-wsl2 bash -c /mnt/c/Users/RUNNER~1/AppData/Local/Temp/lima-wsl2-boot-977272253.sh]): exit status 1, check /var/log/lima-init.log for more details (out=\\\"LIMA 2026-06-06T12:32:45+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/00-alpine-user-group.sh\\\\nLIMA 2026-06-06T12:32:45+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/00-check-rtc-and-wait-ntp.sh\\\\nLIMA 2026-06-06T12:32:45+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/00-guest-home.sh\\\\nLIMA 2026-06-06T12:32:45+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/00-modprobe.sh\\\\nLoading kernel module \\\\\\\"fuse\\\\\\\"\\\\nLoading kernel module \\\\\\\"tun\\\\\\\"\\\\nLoading kernel module \\\\\\\"tap\\\\\\\"\\\\nLoading kernel module \\\\\\\"bridge\\\\\\\"\\\\nLoading kernel module \\\\\\\"veth\\\\\\\"\\\\nLoading kernel module \\\\\\\"ip_tables\\\\\\\"\\\\nLoading kernel module \\\\\\\"ip6_tables\\\\\\\"\\\\nLoading kernel module \\\\\\\"iptable_nat\\\\\\\"\\\\nLoading kernel module \\\\\\\"ip6table_nat\\\\\\\"\\\\nLoading kernel module \\\\\\\"iptable_filter\\\\\\\"\\\\nLoading kernel module \\\\\\\"ip6table_filter\\\\\\\"\\\\nLoading kernel module \\\\\\\"nf_tables\\\\\\\"\\\\nLoading kernel module \\\\\\\"x_tables\\\\\\\"\\\\nLoading kernel module \\\\\\\"xt_MASQUERADE\\\\\\\"\\\\nLoading kernel module \\\\\\\"xt_addrtype\\\\\\\"\\\\nLoading kernel module \\\\\\\"xt_comment\\\\\\\"\\\\nLoading kernel module \\\\\\\"xt_conntrack\\\\\\\"\\\\nLoading kernel module \\\\\\\"xt_mark\\\\\\\"\\\\nLoading kernel module \\\\\\\"xt_multiport\\\\\\\"\\\\nLoading kernel module \\\\\\\"xt_nat\\\\\\\"\\\\nLoading kernel module \\\\\\\"xt_tcpudp\\\\\\\"\\\\nLoading kernel module \\\\\\\"overlay\\\\\\\"\\\\nLIMA 2026-06-06T12:32:45+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/00-reboot-if-required.sh\\\\n+ '[' '' = 1 ']'\\\\n+ exit 0\\\\nLIMA 2026-06-06T12:32:45+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/00-systemd-user-group.sh\\\\nusermod: user 'lima' does not exist\\\\nLIMA 2026-06-06T12:32:45+00:00| WARNING: Failed to execute /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/00-systemd-user-group.sh\\\\nLIMA 2026-06-06T12:32:45+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/01-alpine-ash-as-bash.sh\\\\nLIMA 2026-06-06T12:32:45+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/02-no-cloud-init-setup.sh\\\\nlima ALL=(ALL) NOPASSWD:ALL\\\\nLIMA 2026-06-06T12:32:45+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/04-persistent-data-volume.sh\\\\n+ test -f /etc/alpine-release\\\\n+ exit 0\\\\nLIMA 2026-06-06T12:32:45+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/05-lima-disks.sh\\\\n+ test 0 -gt 0\\\\n+ exit 0\\\\nLIMA 2026-06-06T12:32:45+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/05-lima-mounts.sh\\\\n+ [[ wsl2 == \\\\\\\\v\\\\\\\\z ]]\\\\n+ exit 0\\\\nLIMA 2026-06-06T12:32:45+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/06-enable-mdns-on-systemd.sh\\\\n+ [[ -f /sbin/openrc-run ]]\\\\n+ command -v systemctl\\\\n+ command -v resolvectl\\\\n+ enable_mdns_conf_path=/etc/systemd/resolved.conf.d/00-lima-enable-mdns.conf\\\\n+ enable_mdns_conf_content='[Resolve]\\\\nMulticastDNS=yes\\\\n'\\\\n++ echo '[Resolve]\\\\nMulticastDNS=yes\\\\n'\\\\n++ sha256sum\\\\n++ sha256sum\\\\n/mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/06-enable-mdns-on-systemd.sh: line 23: /etc/systemd/resolved.conf.d/00-lima-enable-mdns.conf: No such file or directory\\\\n+ '[' 'd1bcb38d7fc0dc6247b2057d76c106e42a5fad1b67b4927417e3535a34142b0d  -' '!=' '' ']'\\\\n++ dirname /etc/systemd/resolved.conf.d/00-lima-enable-mdns.conf\\\\n+ mkdir -p /etc/systemd/resolved.conf.d\\\\n+ echo '[Resolve]\\\\nMulticastDNS=yes\\\\n'\\\\n+ systemctl daemon-reload\\\\n+ systemctl restart systemd-resolved.service\\\\n++ resolvectl status\\\\n++ sed -n -E 's/^Link +[0-9]+ \\\\\\\\(([^)]+)\\\\\\\\)/\\\\\\\\1/p'\\\\n+ for iface in $(resolvectl status | sed -n -E 's/^Link +[0-9]+ \\\\\\\\(([^)]+)\\\\\\\\)/\\\\\\\\1/p')\\\\n+ resolvectl mdns eth0 yes\\\\nLIMA 2026-06-06T12:32:46+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/06-etc-hosts.sh\\\\n+ sed -i /host.lima.internal/d /etc/hosts\\\\n+ echo -e '192.168.5.2\\\\\\\\thost.lima.internal'\\\\nLIMA 2026-06-06T12:32:46+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/07-etc-environment.sh\\\\n++ test '!' -f /etc/environment\\\\n++ cat /etc/environment\\\\n+ orig=\\\\n+ '[' -e /etc/environment ']'\\\\n+ sed -i /#LIMA-START/,/#LIMA-END/d /etc/environment\\\\n+ cat /mnt/c/Users/runneradmin/.lima/wsl2/cidata/etc_environment\\\\n+ command -v loginctl\\\\n++ cat /etc/environment\\\\n+ '[' '' '!=' '#LIMA-START\\\\nFTP_PROXY=[http://192.168.5.2:2121\\\\nftp_proxy=http://192.168.5.2:2121\\\\n#LIMA-END](http://192.168.5.2:2121////nftp_proxy=http://192.168.5.2:2121////n#LIMA-END)' ']'\\\\n+ loginctl terminate-user lima\\\\n+ echo iid-1780749137\\\\nLIMA 2026-06-06T12:32:46+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/08-shell-prompt.sh\\\\n+ '[' wsl2 = default ']'\\\\nLIMA 2026-06-06T12:32:46+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/09-host-dns-setup.sh\\\\n+ readonly chain=LIMADNS\\\\n+ chain=LIMADNS\\\\n+ command -v iptables\\\\n+ chain_exists\\\\n+ iptables --table nat -n --list LIMADNS\\\\n+ iptables --table nat --new-chain LIMADNS\\\\n+ iptables --table nat --insert PREROUTING 1 --jump LIMADNS\\\\n+ iptables --table nat --insert OUTPUT 1 --jump LIMADNS\\\\n+ iptables --table nat --flush LIMADNS\\\\n+ '[' -n 49329 ']'\\\\n+ '[' 49329 -ne 0 ']'\\\\n+ iptables --table nat --append LIMADNS --destination 192.168.5.3 --protocol udp --dport 53 --jump DNAT --to-destination 192.168.5.2:49329\\\\n+ '[' -n 52743 ']'\\\\n+ '[' 52743 -ne 0 ']'\\\\n+ iptables --table nat --append LIMADNS --destination 192.168.5.3 --protocol tcp --dport 53 --jump DNAT --to-destination 192.168.5.2:52743\\\\nLIMA 2026-06-06T12:32:46+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/10-alpine-prep.sh\\\\n+ test -f /etc/alpine-release\\\\n+ exit 0\\\\nLIMA 2026-06-06T12:32:46+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/11-colorterm-environment.sh\\\\n+ '[' -d /etc/ssh/sshd_config.d ']'\\\\n+ '[' -e /etc/ssh/sshd_config.d/10-acceptenv-colorterm.conf ']'\\\\n+ echo 'AcceptEnv COLORTERM'\\\\n+ '[' -f /sbin/openrc-run ']'\\\\n+ command -v systemctl\\\\n+ systemctl -q is-active ssh\\\\n+ systemctl -q is-active sshd\\\\n+ systemctl reload sshd\\\\nLIMA 2026-06-06T12:32:46+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/20-rootless-base.sh\\\\n+ command -v systemctl\\\\n+ '[' -O /home/lima.guest ']'\\\\n+ for f in .profile .bashrc .zshrc\\\\n+ grep -q '# Lima BEGIN' /home/lima.guest/.profile\\\\ngrep: /home/lima.guest/.profile: No such file or directory\\\\n+ cat\\\\n++ uname -r\\\\n+ compare_version.sh 6.6.114.1-microsoft-standard-WSL2 -lt 5.13\\\\n+ cat\\\\n+ chown lima /home/lima.guest/.profile\\\\n+ for f in .profile .bashrc .zshrc\\\\n+ grep -q '# Lima BEGIN' /home/lima.guest/.bashrc\\\\n+ cat\\\\n++ uname -r\\\\n+ compare_version.sh 6.6.114.1-microsoft-standard-WSL2 -lt 5.13\\\\n+ cat\\\\n+ chown lima /home/lima.guest/.bashrc\\\\n+ for f in .profile .bashrc .zshrc\\\\n+ grep -q '# Lima BEGIN' /home/lima.guest/.zshrc\\\\ngrep: /home/lima.guest/.zshrc: No such file or directory\\\\n+ cat\\\\n++ uname -r\\\\n+ compare_version.sh 6.6.114.1-microsoft-standard-WSL2 -lt 5.13\\\\n+ cat\\\\n+ chown lima /home/lima.guest/.zshrc\\\\n+ '[' '!' -e /etc/systemd/system/user@.service.d/lima.conf ']'\\\\n+ mkdir -p /etc/systemd/system/user@.service.d\\\\n+ cat\\\\n+ systemctl daemon-reload\\\\n+ sysctl_conf=/etc/sysctl.d/99-lima.conf\\\\n+ '[' '!' -e /etc/sysctl.d/99-lima.conf ']'\\\\n+ '[' -e /proc/sys/kernel/unprivileged_userns_clone ']'\\\\n+ echo 'net.ipv4.ping_group_range = 0 2147483647'\\\\n+ echo net.ipv4.ip_unprivileged_port_start=0\\\\n+ sysctl --system\\\\n* Applying /usr/lib/sysctl.d/10-default-yama-scope.conf ...\\\\n* Applying /usr/lib/sysctl.d/10-map-count.conf ...\\\\n* Applying /usr/lib/sysctl.d/50-coredump.conf ...\\\\n* Applying /usr/lib/sysctl.d/50-default.conf ...\\\\n* Applying /usr/lib/sysctl.d/50-pid-max.conf ...\\\\n* Applying /etc/sysctl.d/99-lima.conf ...\\\\n* Applying /etc/sysctl.d/99-sysctl.conf ...\\\\n* Applying /etc/sysctl.conf ...\\\\nkernel.yama.ptrace_scope = 0\\\\nvm.max_map_count = 1048576\\\\nkernel.core_pattern = |/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h %d %F\\\\nkernel.core_pipe_limit = 16\\\\nfs.suid_dumpable = 2\\\\nkernel.sysrq = 16\\\\nkernel.core_uses_pid = 1\\\\nnet.ipv4.conf.default.rp_filter = 2\\\\nnet.ipv4.conf.eth0.rp_filter = 2\\\\nnet.ipv4.conf.lo.rp_filter = 2\\\\nnet.ipv4.conf.default.accept_source_route = 0\\\\nnet.ipv4.conf.eth0.accept_source_route = 0\\\\nnet.ipv4.conf.lo.accept_source_route = 0\\\\nnet.ipv4.conf.default.promote_secondaries = 1\\\\nnet.ipv4.conf.eth0.promote_secondaries = 1\\\\nnet.ipv4.conf.lo.promote_secondaries = 1\\\\nnet.ipv4.ping_group_range = 0 2147483647\\\\nnet.core.default_qdisc = fq_codel\\\\nfs.protected_hardlinks = 1\\\\nfs.protected_symlinks = 1\\\\nfs.protected_regular = 1\\\\nfs.protected_fifos = 1\\\\nkernel.pid_max = 4194304\\\\nnet.ipv4.ping_group_range = 0 2147483647\\\\nnet.ipv4.ip_unprivileged_port_start = 0\\\\n+ for f in /etc/subuid /etc/subgid\\\\n+ subuid_begin=524288\\\\n+ '[' 1000 -ge 524288 ']'\\\\n+ grep -qw lima /etc/subuid\\\\n+ for f in /etc/subuid /etc/subgid\\\\n+ subuid_begin=524288\\\\n+ '[' 1000 -ge 524288 ']'\\\\n+ grep -qw lima /etc/subgid\\\\n+ systemctl start systemd-logind.service\\\\n+ loginctl enable-linger lima\\\\nLIMA 2026-06-06T12:32:47+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/25-guestagent-base.sh\\\\n+ '[' '' = reverse-sshfs ']'\\\\n+ mkdir -p /usr/local/bin\\\\n+ guestagent_updated=false\\\\n++ sha256sum\\\\n++ sha256sum\\\\n/mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/25-guestagent-base.sh: line 23: /usr/local/bin/lima-guestagent: No such file or directory\\\\n+ '[' 'b9210ed192ae15bd41973855b8cd816238c342056beaa0e2da1bda1a5f702f0d  -' = '' ']'\\\\n+ install -m 755 /mnt/c/Users/runneradmin/.lima/wsl2/cidata/lima-guestagent /usr/local/bin/lima-guestagent\\\\n+ guestagent_updated=true\\\\n+ '[' -f /sbin/openrc-run ']'\\\\n+ rm -f /home/lima.guest/.config/systemd/user/lima-guestagent.service\\\\n+ '[' 970875816 '!=' 0 ']'\\\\n+ sudo /usr/local/bin/lima-guestagent install-systemd --debug=false --guestagent-updated=true --vsock-port 970875816\\\\ntime=\\\\\\\"2026-06-06T12:32:47Z\\\\\\\" level=info msg=\\\\\\\"Written file `/etc/systemd/system/lima-guestagent.service`\\\\\\\"\\\\ntime=\\\\\\\"2026-06-06T12:32:47Z\\\\\\\" level=info msg=\\\\\\\"Executing: systemctl --system daemon-reload\\\\\\\"\\\\ntime=\\\\\\\"2026-06-06T12:32:47Z\\\\\\\" level=info msg=\\\\\\\"Executing: systemctl --system enable lima-guestagent.service\\\\\\\"\\\\nCreated symlink '/etc/systemd/system/multi-user.target.wants/lima-guestagent.service' → '/etc/systemd/system/lima-guestagent.service'.\\\\ntime=\\\\\\\"2026-06-06T12:32:48Z\\\\\\\" level=info msg=\\\\\\\"Executing: systemctl --system try-restart lima-guestagent.service\\\\\\\"\\\\ntime=\\\\\\\"2026-06-06T12:32:48Z\\\\\\\" level=info msg=\\\\\\\"Executing: systemctl --system start lima-guestagent.service\\\\\\\"\\\\ntime=\\\\\\\"2026-06-06T12:32:48Z\\\\\\\" level=info msg=Done\\\\nLIMA 2026-06-06T12:32:48+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/30-install-packages.sh\\\\n+ INSTALL_IPTABLES=0\\\\n+ '[' 1 = 1 ']'\\\\n+ INSTALL_IPTABLES=1\\\\n+ '[' 49329 -ne 0 ']'\\\\n+ INSTALL_IPTABLES=1\\\\n+ '[' -d /mnt/c/Users/runneradmin/.lima/wsl2/cidata/provision.dependency ']'\\\\n+ '[' '' = 1 ']'\\\\n+ REMOUNT_VIRTIOFS=0\\\\n+ grep -qP '\\\\\\\\x7fELF'\\\\n++ command -v apt-get\\\\n+ head -c 4 ''\\\\nhead: cannot open '' for reading: No such file or directory\\\\n+ command -v dnf\\\\n+ pkgs=\\\\n+ extrapkgs=\\\\n+ command -v tar\\\\n+ '[' '' = reverse-sshfs ']'\\\\n+ '[' 1 = 1 ']'\\\\n+ '[' '!' -e /usr/sbin/iptables ']'\\\\n+ '[' '' = 1 ']'\\\\n+ command -v rsync\\\\n+ '[' -n '' ']'\\\\n+ '[' -n '' ']'\\\\n+ '[' '' = 1 ']'\\\\n+ '[' 0 = 1 ']'\\\\nLIMA 2026-06-06T12:32:48+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/35-setup-packages.sh\\\\n+ '[' '' = reverse-sshfs ']'\\\\n+ SETUP_DNS=0\\\\n+ '[' -n 49329 ']'\\\\n+ '[' 49329 -ne 0 ']'\\\\n+ SETUP_DNS=1\\\\n+ '[' -n 52743 ']'\\\\n+ '[' 52743 -ne 0 ']'\\\\n+ SETUP_DNS=1\\\\n+ '[' 1 = 1 ']'\\\\n+ /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/09-host-dns-setup.sh\\\\n+ readonly chain=LIMADNS\\\\n+ chain=LIMADNS\\\\n+ command -v iptables\\\\n+ chain_exists\\\\n+ iptables --table nat -n --list LIMADNS\\\\n+ iptables --table nat --flush LIMADNS\\\\n+ '[' -n 49329 ']'\\\\n+ '[' 49329 -ne 0 ']'\\\\n+ iptables --table nat --append LIMADNS --destination 192.168.5.3 --protocol udp --dport 53 --jump DNAT --to-destination 192.168.5.2:49329\\\\n+ '[' -n 52743 ']'\\\\n+ '[' 52743 -ne 0 ']'\\\\n+ iptables --table nat --append LIMADNS --destination 192.168.5.3 --protocol tcp --dport 53 --jump DNAT --to-destination 192.168.5.2:52743\\\\nLIMA 2026-06-06T12:32:48+00:00| Executing /mnt/c/Users/runneradmin/.lima/wsl2/cidata/boot.Linux/40-install-containerd.sh\\\\n+ : default\\\\n+ : overlayfs\\\\n+ '[' 1 '!=' 1 ']'\\\\n+ command -v systemctl\\\\n++ mktemp -d\\\\n+ tmp_extract_nerdctl=/tmp/tmp.n8WUPCgPmF\\\\n+ tar Cxaf /tmp/tmp.n8WUPCgPmF /mnt/c/Users/runneradmin/.lima/wsl2/cidata/nerdctl-full.tgz bin/nerdctl\\\\n+ '[' '!' -f /usr/local/bin/nerdctl ']'\\\\n+ '[' -f /usr/local/bin/nerdctl ']'\\\\n+ tar Cxaf /usr/local /mnt/c/Users/runneradmin/.lima/wsl2/cidata/nerdctl-full.tgz\\\\n+ mkdir -p /etc/bash_completion.d\\\\n+ nerdctl completion bash\\\\n+ rm -rf /tmp/tmp.n8WUPCgPmF\\\\n+ '[' 1 = 1 ']'\\\\n+ '[' '!' -e /etc/containerd/config.toml ']'\\\\n+ mkdir -p /etc/containerd\\\\n+ cat\\\\n+ '[' '!' -e /etc/buildkit/buildkitd.toml ']'\\\\n+ mkdir -p /etc/buildkit\\\\n+ cat\\\\n+ systemctl enable --now containerd buildkit stargz-snapshotter\\\\nCreated symlink '/etc/systemd/system/multi-user.target.wants/containerd.service' → '/usr/local/lib/systemd/system/containerd.service'.\\\\nCreated symlink '/etc/systemd/system/multi-user.target.wants/buildkit.service' → '/usr/local/lib/systemd/system/buildkit.service'.\\\\nCreated symlink '/etc/systemd/system/multi-user.target.wants/stargz-snapshotter.service' → '/usr/local/lib/systemd/system/stargz-snapshotter.service'.\\\\n+ '[' '' = 1 ']'\\\\nLIMA 2026-06-06T12:33:04+00:00| Exiting with code 1\\\\n\\\")\""

[arixmkii]

Workaround - change fallback UID/GID to something else like 5000/5000.