0 Fork 0

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-10-24 22:27:41 -05:00

Files

T

Antonio Torres 68cc47a3e4 eDNS: disable dnsconfd before configuring Unbound

If dnsconfd is kept enabled after we are done configuring Unbound for the
encrypted DNS setup, it might overwrite the configuration,
resulting in a broken setup. dnsconfd should be disabled prior to
configuring Unbound during the server/client install process.

Fixes: https://pagure.io/freeipa/issue/9859
Signed-off-by: Antonio Torres <antorres@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>

2025-12-02 10:26:56 -05:00

base

eDNS: disable dnsconfd before configuring Unbound

2025-12-02 10:26:56 -05:00

debian

Fix ipa-client-install failure when a trusted CA's distinguished name contains slash characters

2025-08-14 16:31:22 -04:00

fedora

Use OpenSSL provider with BIND for Fedora 42+ and RHEL10+

2025-05-06 13:48:35 +02:00

fedora_container

Installer: add --subid option to select the sssd profile with-subid

2022-05-25 08:11:39 +03:00

nixos

ipaplatform: add initial nixos support

2023-05-04 14:58:15 +02:00

opencloudos

ipaplatform: add opencloudos/tencentos support

2024-01-12 08:36:20 -05:00

redhat

Use ipaplatform tasks for krb5 enctypes

2025-06-20 17:24:23 +02:00

rhel

Use OpenSSL provider with BIND for Fedora 42+ and RHEL10+

2025-05-06 13:48:35 +02:00

rhel_container

Installer: add --subid option to select the sssd profile with-subid

2022-05-25 08:11:39 +03:00

suse

Add missing parameter to Suse modify_nsswitch_pam_stack

2022-06-23 13:06:02 -04:00

tencentos

ipaplatform: add opencloudos/tencentos support

2024-01-12 08:36:20 -05:00

test_fedora_legacy

Add test for master key upgrade

2025-06-20 17:24:23 +02:00

__init__.py

Make ipaplatform a regular top-level package

2020-05-05 11:47:16 +02:00

_importhook.py

Use find_spec() in meta importer

2023-09-18 17:46:24 +02:00

constants.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

Makefile.am

Use namespace-aware meta importer for ipaplatform

2017-11-15 14:17:24 +01:00

osinfo.py

pylint: Fix cyclic-import

2023-01-10 08:30:58 +01:00

override.py.in

Use namespace-aware meta importer for ipaplatform

2017-11-15 14:17:24 +01:00

paths.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

README.md

Don't configure authselect in containers

2020-08-06 14:20:54 +02:00

services.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Add test for master key upgrade

2025-06-20 17:24:23 +02:00

tasks.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

README.md

IPA platform abstraction

The ipaplatform package provides an abstraction layer for supported Linux distributions and flavors. The package contains constants, paths to commands and config files, services, and tasks.

base abstract base platform
debian Debian- and Ubuntu-like
redhat abstract base for Red Hat platforms
fedora Fedora
fedora_container freeipa-container on Fedora
rhel RHEL and CentOS
rhel_container freeipa-container on RHEL and CentOS
suse OpenSUSE and SLES

[base]
  ├─ debian
  ├─[redhat]
  │   ├─ fedora
  │   │   └─ fedora_container
  │   └─ rhel
  │       └─ rhel_container
  └─ suse

(Note: Debian and SUSE use some definitions from Red Hat namespace.)

freeipa-container platform

The fedora_container and rhel_container platforms are flavors of the fedora and rhel platforms. These platform definitions are specifically designed for freeipa-container. The FreeIPA server container implements a read-only container. Paths like /etc, /usr, and /var are mounted read-only and cannot be modified. The image uses symlinks to store all variable data like config files and LDAP database in /data.

Some commands don't write through dangling symlinks. The IPA platforms for containers prefix some paths with /data.
ipa-server-upgrade verifies that the platform does not change between versions. To allow upgrades of old containers, sysupgrade maps $distro_container to $distro platform.
The container images come with authselect pre-configured with sssd with-sudo option. The tasks modify_nsswitch_pam_stack and migrate_auth_configuration are no-ops. ipa-restore does not restore authselect settings. ipa-backup still stores authselect settings in backup data.
The --mkhomedir option is not supported.