Rafael Guterres Jeffman 2d3da2d72c test container: Add DAC_READ_SEARCH capability ...

SSSD 2.10+ runs under non-privileged user 'sssd' and relies on system
capabilities to get access to certain resources like /etc/krb5.keytab.
Not having these capabilities result in SSSD not starting.

Podman has reduced the capabilities granted to containers, and to be
able to start SSSD it is needed to add DAC_READ_SEARCH back.

This patch adds file infra/images/shdefaults to store the defaults used
by ansible-freeipa shell utilities in a contral location.

See:  https://github.com/containers/podman/discussions/24904#discussioncomment-11718823

Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>

2025-04-17 09:44:01 -03:00

..

azure

Use ubuntu 24.04 for testing

2025-04-02 12:55:23 +02:00

image

test container: Add DAC_READ_SEARCH capability

2025-04-17 09:44:01 -03:00