See Drop requirement on nss-altfiles, use systemd sysusers · Issue #49 · coreos/rpm-ostree · GitHub
First for libvirt IMO it’s better to do Marek Goldmann | Configuring polkit in Fedora 18 to access virt-manager
But copying my workaround from the issue: anyone who wants to e.g. add themselves to the libvirt
group should do:
grep -E '^libvirt:' /usr/lib/group >> /etc/group
We have some work in progress to switch to sysusers: https://github.com/projectatomic/rpm-ostree/pull/1679