Tuesday, January 11, 2022

[389-users] Re: Running dscontainer as a non-root user

> On 11 Jan 2022, at 10:22, Steve F <steve.falzon@outlook.com> wrote:
>
> Thanks so much William!
>
> Regarding "user in the container needs to exist and have matching uid/gid" - that is fine and we will handle it on our side.
>
> Please let me know if you'd like me to do any testing once the issue is fixed :)

The issue only affects you if the user/group don't exist in the container.

https://github.com/389ds/389-ds-base/issues/5102

If you have a user/group that's available then it should work "today".

>
> If you have any doco also regarding specific config to make it work, that would be good too. e.g. update to any config file or is it enough to run dscontainer as the unprivileged user?

There are some environment variables you can optionally use that affect the instance, I will also document these soon.


> _______________________________________________
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

--
Sincerely,

William Brown

Senior Software Engineer, Identity and Access Management
SUSE Labs, Australia
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

No comments:

Post a Comment