Skip to content

Commit

Permalink
Stop the sssd.service from changing the /etc/sssd symlink.
Browse files Browse the repository at this point in the history
Addressing
C /etc/sssd
  • Loading branch information
adelton committed Dec 27, 2024
1 parent e15e95e commit 7c42365
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions Dockerfile.fedora-rawhide
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,9 @@ RUN systemctl mask rpc-gssd.service
# Workaround https://bugzilla.redhat.com/show_bug.cgi?id=2334087
COPY patches/sssd-capabilities.conf /usr/lib/systemd/system/sssd.service.d/capabilities.conf
RUN setcap cap_dac_override+ep /usr/libexec/sssd/ldap_child
# Stop the sssd.service from changing the /etc/sssd symlink
RUN mkdir /usr/lib/systemd/system/sssd.service.d \
&& ( echo '[Service]' ; echo 'ExecStartPre=' ; sed '/ExecStartPre/!d; s/-R/-R -H/g' /usr/lib/systemd/system/sssd.service ) > /usr/lib/systemd/system/sssd.service.d/avoid-chown-chmod-on-image.conf

# Container image which runs systemd
# debug: RUN test -f /etc/machine-id && ! test -s /etc/machine-id
Expand Down

0 comments on commit 7c42365

Please sign in to comment.