mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

Files

Florence Blanc-Renaud c2c533b765 Adapt redhat ipaplatform to RHEL9/ELN

On RHEL8, ipa is using named-pkcs11.service but RHEL9 is based on
fedora34 and uses named.service instead. There is already some support
for this distinction in ipaplatform, and the patch relies on the
specific settings that can be configured in ipaplatform/xx/services.py
and ipaplatform/xx/constants.py

On RHEL9 ipa also needs to define NAMED_OPENSSL_ENGINE for named
to use openssl's okcs11 engine.

Fixes: https://pagure.io/freeipa/issue/8753
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2021-03-29 10:03:21 +03:00

base

ipatests: collect config files for NetworkManager and systemd-resolved

2021-03-04 18:47:32 +01:00

debian

Debian: Fix chrony service name

2020-12-18 20:37:10 +02:00

fedora

Always define the path DNSSEC_OPENSSL_CONF

2020-11-30 15:52:19 +01:00

fedora_container

Add missing fedora_container platform members

2020-09-29 12:06:24 +02:00

redhat

cleanup: Drop never used path for httpd's ccache

2021-03-04 14:17:01 +02:00

rhel

Adapt redhat ipaplatform to RHEL9/ELN

2021-03-29 10:03:21 +03:00

rhel_container

Add User and Group to all ipaplatform.constants

2020-09-22 09:23:18 -04:00

suse

ipatests: Respect platform's openssl dir

2020-11-17 14:25:39 +02:00

__init__.py

Make ipaplatform a regular top-level package

2020-05-05 11:47:16 +02:00

_importhook.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

constants.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

Makefile.am

Use namespace-aware meta importer for ipaplatform

2017-11-15 14:17:24 +01:00

osinfo.py

Allow to override ipaplatform with env var

2020-07-30 11:38:25 +02:00

override.py.in

Use namespace-aware meta importer for ipaplatform

2017-11-15 14:17:24 +01:00

paths.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

README.md

Don't configure authselect in containers

2020-08-06 14:20:54 +02:00

services.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Add ipaplatform for Fedora and RHEL container

2020-07-30 11:38:25 +02:00

tasks.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

README.md

IPA platform abstraction

The ipaplatform package provides an abstraction layer for supported Linux distributions and flavors. The package contains constants, paths to commands and config files, services, and tasks.

base abstract base platform
debian Debian- and Ubuntu-like
redhat abstract base for Red Hat platforms
fedora Fedora
fedora_container freeipa-container on Fedora
rhel RHEL and CentOS
rhel_container freeipa-container on RHEL and CentOS
suse OpenSUSE and SLES

[base]
  ├─ debian
  ├─[redhat]
  │   ├─ fedora
  │   │   └─ fedora_container
  │   └─ rhel
  │       └─ rhel_container
  └─ suse

(Note: Debian and SUSE use some definitions from Red Hat namespace.)

freeipa-container platform

The fedora_container and rhel_container platforms are flavors of the fedora and rhel platforms. These platform definitions are specifically designed for freeipa-container. The FreeIPA server container implements a read-only container. Paths like /etc, /usr, and /var are mounted read-only and cannot be modified. The image uses symlinks to store all variable data like config files and LDAP database in /data.

Some commands don't write through dangling symlinks. The IPA platforms for containers prefix some paths with /data.
ipa-server-upgrade verifies that the platform does not change between versions. To allow upgrades of old containers, sysupgrade maps $distro_container to $distro platform.
The container images come with authselect pre-configured with sssd with-sudo option. The tasks modify_nsswitch_pam_stack and migrate_auth_configuration are no-ops. ipa-restore does not restore authselect settings. ipa-backup still stores authselect settings in backup data.
The --mkhomedir option is not supported.