administrator
  • Joined on 2026-05-07

quadlets/freeipa-server (almalinux-9-4.12.2)

Published 2026-05-11 11:27:24 -07:00 by administrator

Installation

docker pull gitea.iot.cudanet.org/administrator/quadlets/freeipa-server:almalinux-9-4.12.2
sha256:e7ab267dbbbb116cd21f1d284875110b22a2d458fa6e626f3f1fa214b8179977

Image Layers

COPY / / # buildkit
ENV LANG=C.utf8
STOPSIGNAL SIGRTMIN+3
CMD ["/sbin/init"]
RUN /bin/sh -c groupadd -g 288 kdcproxy ; useradd -u 288 -g 288 -c 'IPA KDC Proxy User' -r -d / -s '/sbin/nologin' kdcproxy # buildkit
RUN /bin/sh -c groupadd -g 289 ipaapi; useradd -u 289 -g 289 -c 'IPA Framework User' -r -d / -s '/sbin/nologin' ipaapi # buildkit
RUN /bin/sh -c groupadd -g 285 sssd; useradd -u 285 -g 285 -c 'User for sssd' -r -d /run/sssd/ -s '/sbin/nologin' sssd # buildkit
RUN /bin/sh -c groupadd -g 225 ods; useradd -u 225 -g 225 -c 'opendnssec daemon account' -r -d / -s /sbin/nologin ods # buildkit
RUN /bin/sh -c groupadd -g 207 printadmin # buildkit
RUN /bin/sh -c ln -s /bin/false /usr/sbin/systemd-machine-id-setup # buildkit
RUN /bin/sh -c sed -i 's!%_install_langs.*!%_install_langs all!' /etc/rpm/macros.image-language-conf # buildkit
RUN /bin/sh -c dnf -y install --setopt=install_weak_deps=False ipa-server ipa-server-dns ipa-server-trust-ad patch ipa-healthcheck ipa-client-epn && dnf clean all # buildkit
COPY tmpfiles-ownership-fedora-40.conf /usr/lib/tmpfiles.d/ipa-ownership.conf # buildkit
RUN /bin/sh -c systemctl mask rpc-gssd.service # buildkit
ENV container=oci
COPY DefaultLimitNOFILE.conf /usr/lib/systemd/system.conf.d/DefaultLimitNOFILE.conf # buildkit
ENTRYPOINT ["/usr/sbin/init"]
STOPSIGNAL RTMIN+3
RUN /bin/sh -c find /etc/systemd/system /usr/lib/systemd/system/{basic,multi-user,sysinit}.target.wants -type l \! -lname /dev/null | xargs rm -v # buildkit
RUN /bin/sh -c systemctl mask systemd-logind.service && mv /usr/lib/systemd/system/systemd-logind.service /usr/lib/systemd/system/systemd-logind.service-disable-dbus # buildkit
COPY patches/minimal-fedora-37.patch /root/ # buildkit
RUN /bin/sh -c patch --verbose -p0 --fuzz=0 < /root/minimal-fedora-37.patch # buildkit
RUN /bin/sh -c ln -s /usr/lib/systemd/system/dbus-broker.service /usr/lib/systemd/system/dbus.service # buildkit
COPY container-ipa.target /usr/lib/systemd/system/ # buildkit
RUN /bin/sh -c systemctl set-default container-ipa.target # buildkit
RUN /bin/sh -c rmdir -v /etc/systemd/system/multi-user.target.wants && mkdir /etc/systemd/system/container-ipa.target.wants && ln -s /etc/systemd/system/container-ipa.target.wants /etc/systemd/system/multi-user.target.wants # buildkit
RUN /bin/sh -c mkdir /var/log/journal # buildkit
RUN /bin/sh -c systemd-tmpfiles --remove --create # buildkit
RUN /bin/sh -c mv /usr/bin/nisdomainname /usr/bin/nisdomainname.orig # buildkit
ADD hostnamectl-wrapper /usr/bin/nisdomainname # buildkit
COPY patches/ipa-rhel-9.patch /root # buildkit
RUN /bin/sh -c set -o pipefail ; patch --verbose -p0 --fuzz=0 < /root/ipa-rhel-9.patch | tee /dev/null | sed -n 's/^patching file //;T;/\.py$/p' | xargs /usr/libexec/platform-python -m compileall # buildkit
COPY patches/ipa-data-rhel-9.patch /root # buildkit
RUN /bin/sh -c set -o pipefail ; patch --verbose -p0 --fuzz=0 < /root/ipa-data-rhel-9.patch | tee /dev/null | sed -n 's/^patching file //;T;/\.py$/p' | xargs /usr/libexec/platform-python -m compileall # buildkit
COPY ipaplatform-rhel.conf /usr/lib/systemd/system.conf.d/ipaplatform-override.conf # buildkit
ENV IPAPLATFORM_OVERRIDE=rhel_container
COPY journald-storage.conf /usr/lib/systemd/journald.conf.d/storage.conf # buildkit
RUN /bin/sh -c mv /usr/sbin/ipa-join /usr/sbin/ipa-join.orig # buildkit
COPY ipa-join /usr/sbin/ipa-join # buildkit
RUN /bin/sh -c authselect select sssd with-sudo --force && mv /usr/bin/authselect /usr/bin/authselect.orig # buildkit
COPY authselect /usr/bin/authselect # buildkit
COPY utils/prepare-volume-template utils/populate-volume-from-template utils/extract-rpm-upgrade-scriptlets /usr/local/bin/ # buildkit
COPY volume-data-list volume-tmp-list volume-data-autoupdate /etc/ # buildkit
RUN /bin/sh -c /usr/local/bin/prepare-volume-template /etc/volume-data-list /data # buildkit
RUN /bin/sh -c /usr/local/bin/prepare-volume-template /etc/volume-tmp-list /tmp # buildkit
RUN /bin/sh -c /usr/local/bin/extract-rpm-upgrade-scriptlets # buildkit
RUN /bin/sh -c echo 2.0 > /etc/volume-version # buildkit
VOLUME [/tmp /run /data]
COPY init-data-minimal /usr/local/sbin/init # buildkit
ENTRYPOINT ["/usr/local/sbin/init"]
COPY init-data /usr/local/sbin/init # buildkit
COPY ipa-server-configure-first systemctl-exit-with-status ipa-volume-upgrade-* /usr/sbin/ # buildkit
COPY ipa-server-configure-first.service ipa-server-upgrade.service ipa-server-update-self-ip-address.service /usr/lib/systemd/system/ # buildkit
COPY service-success-poweroff.conf /usr/lib/systemd/system/ipa-server-configure-first.service.d/service-success-poweroff.conf.template # buildkit
RUN /bin/sh -c ln -sv /usr/lib/systemd/system/ipa-server-configure-first.service /data-template/etc/systemd/system/container-ipa.target.wants/ipa-server-configure-first.service # buildkit
COPY exit-status.conf /usr/lib/systemd/system/systemd-poweroff.service.d/ # buildkit
EXPOSE map[123/udp:{} 389/tcp:{} 443/tcp:{} 464/tcp:{} 464/udp:{} 53/tcp:{} 53/udp:{} 636/tcp:{} 80/tcp:{} 88/tcp:{} 88/udp:{}]
RUN /bin/sh -c uuidgen > /data-template/build-id # buildkit
LABEL org.opencontainers.image.title=FreeIPA server
LABEL org.opencontainers.image.authors=FreeIPA Developers <freeipa-devel@lists.fedorahosted.org>
LABEL org.opencontainers.image.documentation=https://github.com/freeipa/freeipa-container
LABEL org.opencontainers.image.licenses=Apache-2.0

Labels

Key Value
org.opencontainers.image.authors FreeIPA Developers <freeipa-devel@lists.fedorahosted.org>
org.opencontainers.image.base.digest sha256:573cc3948580f88606412b13064041f0d037a264d5ec0198f4495e93d7cb119e
org.opencontainers.image.base.name docker.io/almalinux/9-init
org.opencontainers.image.created 2026-05-11T07:54:27.670660145Z
org.opencontainers.image.documentation https://github.com/freeipa/freeipa-container
org.opencontainers.image.licenses Apache-2.0
org.opencontainers.image.revision 9b69804969ac54ad225ee0bfe8d5df20d30443a8
org.opencontainers.image.source https://github.com/freeipa/freeipa-container/blob/9b69804969ac54ad225ee0bfe8d5df20d30443a8/Dockerfile.almalinux-9
org.opencontainers.image.title FreeIPA server
org.opencontainers.image.url https://github.com/freeipa/freeipa-container/actions/runs/25657489282
org.opencontainers.image.version 4.12.2-rpms-1f84da31e4e8cc496ace8ce239bd9e1c5f71022a59207da6a858c58366d44ccf-gittree-6736abbb84c74831b2f22ecfa3e8523b29c260b7
Details
Container
2026-05-11 11:27:24 -07:00
0
OCI / Docker
linux/arm64
FreeIPA Developers <freeipa-devel@lists.fedorahosted.org>
Apache-2.0
305 MiB
Versions (1) View all
almalinux-9-4.12.2 2026-05-11