freeipa

#8401 Create platform definitions for freeipa-container
Closed: fixed by frenaud. Opened by cheimes.

Closed: fixed
Reopen Issue

Request for enhancement

https://github.com/freeipa/freeipa-container uses a read-only container approach with a /data directory for state, configuration, and volatile data. Most paths are redirected using symlinks but some applications don't support dangling symlinks. ipaplatform definitions for fedora_container and rhel_container would allow freeipa-container approach to drop most patches and simplify the effort.

Metadata Update from @cheimes:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4904

PR 4904 makes several freeipa-container changes obsolete:

  • ipa-join override
  • ipaplatform patch for KRB5_CONF, KRB5_KEYTAB, NAMED*, NSSWITCH_CONF paths
  • ipaca_default.ini patch
  • smb.conf and adtrustinstance installer patch

CPython upstream PR https://github.com/python/cpython/pull/21430 addresses the SELinux issue in shutil.copystat().

master:

  • eec5c9d8206f8ca612677369fdd3fce39205fa32 Allow to override ipaplatform with env var
  • 02986ff42b97dceb689abb32cf937da993880ddd Add ipaplatform for Fedora and RHEL container
  • 64b20aad283c6a0a9557e77993b09679a72efa88 Write state dir to smb.conf
  • 664007e031bec3b1c6f4a9518f427e139b026a1e Explicitly pass keytab to ipa-join
  • 8f6502db03576c92b25f4460fb98d75e0fe68f28 Convert ipa-httpd-pwdreader into Python script

ipa-4-8:

  • 90ae22b8e54fc6108e39ad93f26035446ab728f1 Allow to override ipaplatform with env var
  • 61807788f40c2596686b79f4bbd4e0e766e995dd Add ipaplatform for Fedora and RHEL container
  • c3bf50b1b2611f0dfea699ae7ba134c2857187d9 Write state dir to smb.conf
  • 305deb450c564e561b5facafee8ed6966de7bc83 Explicitly pass keytab to ipa-join
  • c68d14b6be858523c06939c2e7f4f4e3de3221de Convert ipa-httpd-pwdreader into Python script

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • 999485909a0bc654570f05cd2127d86d14d6f25a Don't configure authselect in containers

ipa-4-8:

  • 6926131f258d82b9a8634e3b292c6ecf83f2a5be Don't configure authselect in containers

master:

  • e89b40071356b1c3050accee54f8332531d9bac2 Treat container subplatforms like main platform

ipa-4-8:

  • 508c5e5d3bd003a854090bae7ebd3dccf74cd6a9 Treat container subplatforms like main platform

Metadata Update from @cheimes:
- Custom field changelog adjusted to ipaplatform now provides container platform flavors for freeipa/freeipa-container
Metadata
None

containers

None
None
None
ipaplatform now provides container platform flavors for freeipa/freeipa-container
https://github.com/freeipa/freeipa/pull/4904
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.