AlmaLinux / AlmaLinux/bootc-images

[BUG]: Authselect profiles missing altfiles

Ouverte
#63 0 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
bug
Langage dominant
Dockerfile
Étoiles
50
Forks
16
Métriques de merge des PR
Aucune PR mergée en 30 j

Description

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Current Behavior

altfiles missing from /etc/nsswitch.conf for both passwd and group
breaks services such as sssd and sshd as required users/groups are missing leaving unmapped uid/gid for important service files.

### Expected Behavior

changing authselect profile keeps altfiles and thus doesn't break services.

### Steps To Reproduce

```
authselect select sssd --force
authselect apply-changes
ls -lh /etc/ssh/sshd
```
group will not have ssh_keys, but instead some uid (e.g. 999)

### Anything else?

I have cloned the repo and modified the almalinux9.yaml manifest to include authselect as there is an upstream fix that I found in a Jira issue for RHEL. There's an authselect rpm script that needs to see /var/run/ostree-booted, which doesn't exist for subsequent Containerfile builds. It creates /usr/share/authselect/vendor/{minimal,sssd,winbind} profiles with the fixed altfiles addition for the el9 based images.
Add authselect to the base image container manifest.

### Search terms

authselect

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.