AlmaLinux / AlmaLinux/bootc-images

[BUG]: Authselect profiles missing altfiles

Open
#63 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Dockerfile
Stars
50
Forks
16
PR merge metrics
No merged PRs in 30d

Description

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Current Behavior

altfiles missing from /etc/nsswitch.conf for both passwd and group
breaks services such as sssd and sshd as required users/groups are missing leaving unmapped uid/gid for important service files.

### Expected Behavior

changing authselect profile keeps altfiles and thus doesn't break services.

### Steps To Reproduce

```
authselect select sssd --force
authselect apply-changes
ls -lh /etc/ssh/sshd
```
group will not have ssh_keys, but instead some uid (e.g. 999)

### Anything else?

I have cloned the repo and modified the almalinux9.yaml manifest to include authselect as there is an upstream fix that I found in a Jira issue for RHEL. There's an authselect rpm script that needs to see /var/run/ostree-booted, which doesn't exist for subsequent Containerfile builds. It creates /usr/share/authselect/vendor/{minimal,sssd,winbind} profiles with the fixed altfiles addition for the el9 based images.
Add authselect to the base image container manifest.

### Search terms

authselect

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.