AlmaLinux / AlmaLinux/bootc-images

[BUG]: Authselect profiles missing altfiles

未关闭
#63 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
bug
主要语言
Dockerfile
星标
50
派生
16
PR 合并指标
30 天内没有已合并 PR

描述

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Current Behavior

altfiles missing from /etc/nsswitch.conf for both passwd and group
breaks services such as sssd and sshd as required users/groups are missing leaving unmapped uid/gid for important service files.

### Expected Behavior

changing authselect profile keeps altfiles and thus doesn't break services.

### Steps To Reproduce

```
authselect select sssd --force
authselect apply-changes
ls -lh /etc/ssh/sshd
```
group will not have ssh_keys, but instead some uid (e.g. 999)

### Anything else?

I have cloned the repo and modified the almalinux9.yaml manifest to include authselect as there is an upstream fix that I found in a Jira issue for RHEL. There's an authselect rpm script that needs to see /var/run/ostree-booted, which doesn't exist for subsequent Containerfile builds. It creates /usr/share/authselect/vendor/{minimal,sssd,winbind} profiles with the fixed altfiles addition for the el9 based images.
Add authselect to the base image container manifest.

### Search terms

authselect

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。