Hi,
Has anyone encountered a problem as shown in the pic and is there a fix for it? The two “accounts” appeared after a sudden shutdown during a package update.
Cheers, D
Operating System: EndeavourOS
KDE Plasma Version: 6.7.4
KDE Frameworks Version: 6.28.0
Qt Version: 6.11.1
Kernel Version: 6.18.43-3-lts (64-bit)
Graphics Platform: Wayland
Have never experienced this, what where you updating, how where you updating?
Hi, unfortunately I couldn’t remember what packages were being installed (it was via -Syu), but I read somewhere that some installations may create these accounts or something (I have to check)
I’m not too sure where to go then from here, others might know more but I don’t think I ever installed anything that makes its own account ever
Right, thanks anyway, I’ll look further then
Yer sorry I couldn’t help more, hopefully someone a bit more knowledgeable can chime in
Check
sudo grep -E 'root|git' /etc/passwd
Seems shell is wrongly changed for root and others
Sorry to ask but can you explain this a bit more, I never had anything do this and want to know why it occurs.
Hi,
I did that and it returned “root” (0) and “git” (963) along with another thing. Also I haven’t found any reference that refers to anything similar to SDDM’s ID settings in plasmalogin
Look in the file /var/log/pacman.log on what was installed and updated. That ought to give you a clue. Also was the installation or updation done using yay -Syu or pacman -Syu or something else?
Ideally programs should not be adding users or modifying users which appear on the login screen.
Maybe the config file for your login-manager is missing something like “only show users >999”?
I’m at my mobile phone at the moment and can’t look at my config, sorry.
Hi,
It took a while but here’s the only part in my log with “git daemon user” in it. I can’t seem to find any info online about ALPM-SCRIPTLET making groups - and my packages seem to work fine even after the crash, so what gives?
[2026-07-24T21:15:43+0700] [ALPM] transaction completed
[2026-07-24T21:15:43+0700] [ALPM] running '20-systemd-sysusers.hook'...
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'i2c' with GID 967.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'ntp' with GID 87.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'locate' with GID 21.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'avahi' with GID 966.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'avahi' (Avahi mDNS/DNS-SD daemon) with UID 966 and GID 966.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'named' with GID 40.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'named' (BIND DNS Server) with UID 40 and GID 40.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'dnsmasq' with GID 965.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'dnsmasq' (dnsmasq daemon) with UID 965 and GID 965.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'fwupd' with GID 964.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'fwupd' (Firmware update daemon) with UID 964 and GID 964.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'git' with GID 963.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'git' (git daemon user) with UID 963 and GID 963.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'nm-openconnect' with GID 962.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'nm-openconnect' (NetworkManager OpenConnect) with UID 962 and GID 962.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'nm-openvpn' with GID 961.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'nm-openvpn' (NetworkManager OpenVPN) with UID 961 and GID 961.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'ntp' (Network Time Protocol) with UID 87 and GID 87.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'openvpn' with GID 960.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'openvpn' (OpenVPN) with UID 960 and GID 960.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'passim' with GID 959.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'passim' (Local Caching Server) with UID 959 and GID 959.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'plasmalogin' with GID 958.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'plasmalogin' (PLASMALOGIN Greeter Account) with UID 958 and GID 958.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'rpc' with GID 32.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'rpc' (Rpcbind Daemon) with UID 32 and GID 32.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'rpcuser' with GID 34.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'rpcuser' (RPC Service User) with UID 34 and GID 34.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating group 'rtkit' with GID 957.
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Creating user 'rtkit' (RealtimeKit) with UID 957 and GID 957.
[2026-07-24T21:15:43+0700] [ALPM] running '21-systemd-tmpfiles.hook'...
[2026-07-24T21:15:43+0700] [ALPM] running '25-systemd-hwdb.hook'...
[2026-07-24T21:15:43+0700] [ALPM] running '30-systemd-daemon-reload-system.hook'...
[2026-07-24T21:15:43+0700] [ALPM-SCRIPTLET] Skipped: Running in chroot.
[2026-07-24T21:15:43+0700] [ALPM] running '30-systemd-daemon-reload-user.hook'...
[2026-07-24T21:15:44+0700] [ALPM-SCRIPTLET] Skipped: Running in chroot.
[2026-07-24T21:15:44+0700] [ALPM] running '30-update-mime-database.hook'...
[2026-07-24T21:15:44+0700] [ALPM] running '35-systemd-udev-reload.hook'...
[2026-07-24T21:15:44+0700] [ALPM-SCRIPTLET] Skipped: Running in chroot.
[2026-07-24T21:15:44+0700] [ALPM] running '35-systemd-update.hook'...
[2026-07-24T21:15:44+0700] [ALPM] running '40-fontconfig-config.hook'...
[2026-07-24T21:15:44+0700] [ALPM] running '90-update-appstream-cache.hook'...
[2026-07-24T21:15:44+0700] [ALPM-SCRIPTLET] ✔ Metadata cache was updated successfully.
[2026-07-24T21:15:44+0700] [ALPM] running 'accounts-daemon-restart.hook'...
[2026-07-24T21:15:44+0700] [ALPM-SCRIPTLET] Skipped: Running in chroot.
[2026-07-24T21:15:44+0700] [ALPM] running 'dbus-reload.hook'...
[2026-07-24T21:15:44+0700] [ALPM-SCRIPTLET] Skipped: Running in chroot.
[2026-07-24T21:15:44+0700] [ALPM] running 'detect-old-perl-modules.hook'...
[2026-07-24T21:15:44+0700] [ALPM] running 'fontconfig.hook'...
[2026-07-24T21:15:45+0700] [ALPM] running 'gdk-pixbuf-query-loaders.hook'...
[2026-07-24T21:15:45+0700] [ALPM] running 'gio-querymodules.hook'...
[2026-07-24T21:15:45+0700] [ALPM] running 'glib-compile-schemas.hook'...
[2026-07-24T21:15:45+0700] [ALPM] running 'gtk-query-immodules-3.0.hook'...
[2026-07-24T21:15:45+0700] [ALPM] running 'gtk-update-icon-cache.hook'...
[2026-07-24T21:15:46+0700] [ALPM] running 'texinfo-install.hook'...
[2026-07-24T21:15:46+0700] [ALPM] running 'update-desktop-database.hook'...
[2026-07-24T21:15:46+0700] [ALPM] running 'update-vlc-plugin-cache.hook'...
[2026-07-24T21:15:46+0700] [ALPM] running 'vimdoc.hook'...
[2026-07-24T21:15:46+0700] [PACMAN] Running 'pacman -S --noconfirm --noprogressbar --needed --disable-download-timeout firefox'
[2026-07-24T21:15:53+0700] [ALPM] transaction started
[2026-07-24T21:15:53+0700] [ALPM] installed mailcap (2.1.54-2)
[2026-07-24T21:15:54+0700] [ALPM] installed firefox (153.0-1)
[2026-07-24T21:15:54+0700] [ALPM] transaction completed
[2026-07-24T21:15:54+0700] [ALPM] running '35-systemd-update.hook'...
[2026-07-24T21:15:54+0700] [ALPM] running 'gtk-update-icon-cache.hook'...
[2026-07-24T21:15:54+0700] [ALPM] running 'update-desktop-database.hook'...
[2026-07-24T21:15:54+0700] [PACMAN] Running 'pacman -S --noconfirm --noprogressbar --needed --disable-download-timeout firefox-i18n-de'
[2026-07-24T21:15:54+0700] [ALPM] transaction started
[2026-07-24T21:15:54+0700] [ALPM] installed firefox-i18n-de (153.0-1)
[2026-07-24T21:15:55+0700] [ALPM] transaction completed
[2026-07-24T21:15:55+0700] [ALPM] running '35-systemd-update.hook'...
[2026-07-24T21:15:55+0700] [PACMAN] Running 'pacman -S --noconfirm --noprogressbar --needed --disable-download-timeout aspell'
[2026-07-24T21:15:55+0700] [ALPM] transaction started
[2026-07-24T21:15:55+0700] [ALPM] installed aspell (0.60.8.2-2)
[2026-07-24T21:15:55+0700] [ALPM] transaction completed
[2026-07-24T21:15:55+0700] [ALPM] running '35-systemd-update.hook'...
[2026-07-24T21:15:55+0700] [ALPM] running 'texinfo-install.hook'...
[2026-07-24T21:15:55+0700] [PACMAN] Running 'pacman -S --noconfirm --noprogressbar --needed --disable-download-timeout aspell-de'
[2026-07-24T21:15:56+0700] [ALPM] transaction started
[2026-07-24T21:15:56+0700] [ALPM] installed aspell-de (20161207.7.0-2)
[2026-07-24T21:15:56+0700] [ALPM] transaction completed
[2026-07-24T21:15:56+0700] [ALPM] running '35-systemd-update.hook'...
[2026-07-24T21:15:56+0700] [PACMAN] Running 'pacman -S --noconfirm --noprogressbar --needed --disable-download-timeout linux-lts'
[2026-07-24T21:16:16+0700] [ALPM] transaction started
[2026-07-24T21:16:16+0700] [ALPM] installed linux-lts (6.18.39-1)
[2026-07-24T21:16:16+0700] [ALPM] transaction completed
[2026-07-24T21:16:16+0700] [ALPM] running '35-systemd-update.hook'...
[2026-07-24T21:16:16+0700] [ALPM] running '60-depmod.hook'...
[2026-07-24T21:16:17+0700] [PACMAN] Running 'pacman -S --noconfirm --noprogressbar --needed --disable-download-timeout linux-lts-headers'
[2026-07-24T21:16:22+0700] [ALPM] transaction started
[2026-07-24T21:16:23+0700] [ALPM] installed linux-lts-headers (6.18.39-1)
[2026-07-24T21:16:23+0700] [ALPM] transaction completed
[2026-07-24T21:16:23+0700] [ALPM] running '35-systemd-update.hook'...
[2026-07-24T21:16:23+0700] [ALPM] running '60-depmod.hook'...
[2026-07-24T21:16:29+0700] [PACMAN] Running 'pacman -Sy --noconfirm intel-ucode'
[2026-07-24T21:16:29+0700] [PACMAN] synchronizing package lists
[2026-07-24T21:16:31+0700] [ALPM] transaction started
[2026-07-24T21:16:31+0700] [ALPM] installed intel-ucode (20260512-1)
[2026-07-24T21:16:31+0700] [ALPM] transaction completed
[2026-07-24T21:16:31+0700] [ALPM] running '35-systemd-update.hook'...
[2026-07-24T21:16:31+0700] [PACMAN] Running 'pacman --needed --noconfirm -S nvidia-settings opencl-nvidia libva-nvidia-driver libxnvctrl nvidia-open-lts nvidia-open egl-wayland libva-intel-driver mesa intel-media-driver gst-plugin-va vulkan-intel nvidia-utils'
There is something about it (under use cases) on this page.
Seems ok and transparent but i don’t like for me. The account thing needs to way more upfront.Say user who maintains gets hack, not for me
Rebooted system already after this?
Both accounts should not show in plasmalogin. But the could if login shell for these Is changed. May caused by an update these values got updated and it’s only hickup that they shown.if it stays like that something went wrong, or you done something non properly before.
I remember correctly, this should be checked first. Not using SDDM anymore, but there’s a checkbox preventing display of “system” users (ID<1000). So 99,99% sure @Omig is right.
maybe, PLM now is default I think, I mightik be wrong but yer
For the sake of brevity I have truncated your output. It seems like that the user git daemon user is being generated from the hook 20-systemd-sysusers.hook. This is typically a file /usr/share/libalpm/hooks/20-systemd-sysusers.hook. If you open this file you will observe that the users are fetched from the directory, /usr/lib/sysusers.d/. So carry out the following steps in the order given.
Open a terminal and go to the directory /usr/lib/sysusers.d/. In the terminal give the following command
$ cd /usr/lib/sysusers.d/
$
$ sudo grep -E -nH "git" *
This will give a list of files which has the user git. These files will typically have an extension .conf. Open these files one by one which has the user git daemon user. Make a note of these file names. Then execute the following command.
$ sudo pacman -Qo <<AbsolutePathOfTheCONFFile>>
Replace the <<AbsolutePathOfTheCONFFile>> with the full path of the .conf file identified earlier. This will list out a package name. Check if you need this package or not. If not needed, uninstall it. If you want to know why this package was installed, refer to the file /var/log/pacman.log for details on why the package is required or not. Once you remove the package the user will go away.
You will then have to investigate why this package was installed and whether your system needs a more through check or not.
If however you need this package, then refer to the post by @PeterRies.
In KDE Plasma 6.6.x or higher go to the System Settings. And navigate to Appearance & Style > Login Screen > Behaviour and change the value of Minimum user UID to 1000. See the screenshot given below for more details. This is for SDDM, but something similar will be there for Plasma Login Manager, aka PLM too. Cant say about other Display Managers though.
Reboot the system and the user should no longer be visible.
If the issue persists after every update or a package install then you have to dig a bit deeper to figure out the issue.
None of these users and groups is an issue, they’re all normal. They were present on your system before. They were recreated following a system shutdown during an update:
A system crash/shutdown during an update is a pretty chaotic event, and one can presume that recreating these groups was one of the things that the system needed to do to recover.
git daemon user is perfectly normal, it’s created and used by the git package (which is required by yay, which is shipped by default with Endeavouros).
Stagger_Lee>> getent passwd | grep git
git:x:977:977:git daemon user:/:/usr/bin/git-shell
The only issue with these users (root and git daemon user) is that they should not be showing as entries on the login screen.
Have you run an update (and rebooted) since the system shutdown during an update?