Block a user
quadlets/freeipa-server (almalinux-9-4.12.2)
Published 2026-05-11 11:27:24 -07:00 by administrator
Installation
docker pull gitea.iot.cudanet.org/administrator/quadlets/freeipa-server:almalinux-9-4.12.2sha256:e7ab267dbbbb116cd21f1d284875110b22a2d458fa6e626f3f1fa214b8179977
Image Layers
| COPY / / # buildkit |
| ENV LANG=C.utf8 |
| STOPSIGNAL SIGRTMIN+3 |
| CMD ["/sbin/init"] |
| RUN /bin/sh -c groupadd -g 288 kdcproxy ; useradd -u 288 -g 288 -c 'IPA KDC Proxy User' -r -d / -s '/sbin/nologin' kdcproxy # buildkit |
| RUN /bin/sh -c groupadd -g 289 ipaapi; useradd -u 289 -g 289 -c 'IPA Framework User' -r -d / -s '/sbin/nologin' ipaapi # buildkit |
| RUN /bin/sh -c groupadd -g 285 sssd; useradd -u 285 -g 285 -c 'User for sssd' -r -d /run/sssd/ -s '/sbin/nologin' sssd # buildkit |
| RUN /bin/sh -c groupadd -g 225 ods; useradd -u 225 -g 225 -c 'opendnssec daemon account' -r -d / -s /sbin/nologin ods # buildkit |
| RUN /bin/sh -c groupadd -g 207 printadmin # buildkit |
| RUN /bin/sh -c ln -s /bin/false /usr/sbin/systemd-machine-id-setup # buildkit |
| RUN /bin/sh -c sed -i 's!%_install_langs.*!%_install_langs all!' /etc/rpm/macros.image-language-conf # buildkit |
| RUN /bin/sh -c dnf -y install --setopt=install_weak_deps=False ipa-server ipa-server-dns ipa-server-trust-ad patch ipa-healthcheck ipa-client-epn && dnf clean all # buildkit |
| COPY tmpfiles-ownership-fedora-40.conf /usr/lib/tmpfiles.d/ipa-ownership.conf # buildkit |
| RUN /bin/sh -c systemctl mask rpc-gssd.service # buildkit |
| ENV container=oci |
| COPY DefaultLimitNOFILE.conf /usr/lib/systemd/system.conf.d/DefaultLimitNOFILE.conf # buildkit |
| ENTRYPOINT ["/usr/sbin/init"] |
| STOPSIGNAL RTMIN+3 |
| RUN /bin/sh -c find /etc/systemd/system /usr/lib/systemd/system/{basic,multi-user,sysinit}.target.wants -type l \! -lname /dev/null | xargs rm -v # buildkit |
| RUN /bin/sh -c systemctl mask systemd-logind.service && mv /usr/lib/systemd/system/systemd-logind.service /usr/lib/systemd/system/systemd-logind.service-disable-dbus # buildkit |
| COPY patches/minimal-fedora-37.patch /root/ # buildkit |
| RUN /bin/sh -c patch --verbose -p0 --fuzz=0 < /root/minimal-fedora-37.patch # buildkit |
| RUN /bin/sh -c ln -s /usr/lib/systemd/system/dbus-broker.service /usr/lib/systemd/system/dbus.service # buildkit |
| COPY container-ipa.target /usr/lib/systemd/system/ # buildkit |
| RUN /bin/sh -c systemctl set-default container-ipa.target # buildkit |
| RUN /bin/sh -c rmdir -v /etc/systemd/system/multi-user.target.wants && mkdir /etc/systemd/system/container-ipa.target.wants && ln -s /etc/systemd/system/container-ipa.target.wants /etc/systemd/system/multi-user.target.wants # buildkit |
| RUN /bin/sh -c mkdir /var/log/journal # buildkit |
| RUN /bin/sh -c systemd-tmpfiles --remove --create # buildkit |
| RUN /bin/sh -c mv /usr/bin/nisdomainname /usr/bin/nisdomainname.orig # buildkit |
| ADD hostnamectl-wrapper /usr/bin/nisdomainname # buildkit |
| COPY patches/ipa-rhel-9.patch /root # buildkit |
| RUN /bin/sh -c set -o pipefail ; patch --verbose -p0 --fuzz=0 < /root/ipa-rhel-9.patch | tee /dev/null | sed -n 's/^patching file //;T;/\.py$/p' | xargs /usr/libexec/platform-python -m compileall # buildkit |
| COPY patches/ipa-data-rhel-9.patch /root # buildkit |
| RUN /bin/sh -c set -o pipefail ; patch --verbose -p0 --fuzz=0 < /root/ipa-data-rhel-9.patch | tee /dev/null | sed -n 's/^patching file //;T;/\.py$/p' | xargs /usr/libexec/platform-python -m compileall # buildkit |
| COPY ipaplatform-rhel.conf /usr/lib/systemd/system.conf.d/ipaplatform-override.conf # buildkit |
| ENV IPAPLATFORM_OVERRIDE=rhel_container |
| COPY journald-storage.conf /usr/lib/systemd/journald.conf.d/storage.conf # buildkit |
| RUN /bin/sh -c mv /usr/sbin/ipa-join /usr/sbin/ipa-join.orig # buildkit |
| COPY ipa-join /usr/sbin/ipa-join # buildkit |
| RUN /bin/sh -c authselect select sssd with-sudo --force && mv /usr/bin/authselect /usr/bin/authselect.orig # buildkit |
| COPY authselect /usr/bin/authselect # buildkit |
| COPY utils/prepare-volume-template utils/populate-volume-from-template utils/extract-rpm-upgrade-scriptlets /usr/local/bin/ # buildkit |
| COPY volume-data-list volume-tmp-list volume-data-autoupdate /etc/ # buildkit |
| RUN /bin/sh -c /usr/local/bin/prepare-volume-template /etc/volume-data-list /data # buildkit |
| RUN /bin/sh -c /usr/local/bin/prepare-volume-template /etc/volume-tmp-list /tmp # buildkit |
| RUN /bin/sh -c /usr/local/bin/extract-rpm-upgrade-scriptlets # buildkit |
| RUN /bin/sh -c echo 2.0 > /etc/volume-version # buildkit |
| VOLUME [/tmp /run /data] |
| COPY init-data-minimal /usr/local/sbin/init # buildkit |
| ENTRYPOINT ["/usr/local/sbin/init"] |
| COPY init-data /usr/local/sbin/init # buildkit |
| COPY ipa-server-configure-first systemctl-exit-with-status ipa-volume-upgrade-* /usr/sbin/ # buildkit |
| COPY ipa-server-configure-first.service ipa-server-upgrade.service ipa-server-update-self-ip-address.service /usr/lib/systemd/system/ # buildkit |
| COPY service-success-poweroff.conf /usr/lib/systemd/system/ipa-server-configure-first.service.d/service-success-poweroff.conf.template # buildkit |
| RUN /bin/sh -c ln -sv /usr/lib/systemd/system/ipa-server-configure-first.service /data-template/etc/systemd/system/container-ipa.target.wants/ipa-server-configure-first.service # buildkit |
| COPY exit-status.conf /usr/lib/systemd/system/systemd-poweroff.service.d/ # buildkit |
| EXPOSE map[123/udp:{} 389/tcp:{} 443/tcp:{} 464/tcp:{} 464/udp:{} 53/tcp:{} 53/udp:{} 636/tcp:{} 80/tcp:{} 88/tcp:{} 88/udp:{}] |
| RUN /bin/sh -c uuidgen > /data-template/build-id # buildkit |
| LABEL org.opencontainers.image.title=FreeIPA server |
| LABEL org.opencontainers.image.authors=FreeIPA Developers <freeipa-devel@lists.fedorahosted.org> |
| LABEL org.opencontainers.image.documentation=https://github.com/freeipa/freeipa-container |
| LABEL org.opencontainers.image.licenses=Apache-2.0 |
Labels
| Key | Value |
|---|---|
| org.opencontainers.image.authors | FreeIPA Developers <freeipa-devel@lists.fedorahosted.org> |
| org.opencontainers.image.base.digest | sha256:573cc3948580f88606412b13064041f0d037a264d5ec0198f4495e93d7cb119e |
| org.opencontainers.image.base.name | docker.io/almalinux/9-init |
| org.opencontainers.image.created | 2026-05-11T07:54:27.670660145Z |
| org.opencontainers.image.documentation | https://github.com/freeipa/freeipa-container |
| org.opencontainers.image.licenses | Apache-2.0 |
| org.opencontainers.image.revision | 9b69804969ac54ad225ee0bfe8d5df20d30443a8 |
| org.opencontainers.image.source | https://github.com/freeipa/freeipa-container/blob/9b69804969ac54ad225ee0bfe8d5df20d30443a8/Dockerfile.almalinux-9 |
| org.opencontainers.image.title | FreeIPA server |
| org.opencontainers.image.url | https://github.com/freeipa/freeipa-container/actions/runs/25657489282 |
| org.opencontainers.image.version | 4.12.2-rpms-1f84da31e4e8cc496ace8ce239bd9e1c5f71022a59207da6a858c58366d44ccf-gittree-6736abbb84c74831b2f22ecfa3e8523b29c260b7 |
Details
2026-05-11 11:27:24 -07:00
Versions (1)
View all
Container
0
OCI / Docker
linux/arm64
FreeIPA Developers <freeipa-devel@lists.fedorahosted.org>
Apache-2.0
305 MiB
almalinux-9-4.12.2
2026-05-11