root
30 lines
839 B
INI
30 lines
839 B
INI
[Unit]
|
|
Description=FreeIPA Server
|
|
After=network-online.target
|
|
|
|
[Container]
|
|
Image=docker.io/freeipa/freeipa-server:almalinux-9-4.12.2
|
|
ContainerName=freeipa-server
|
|
Network=podman-bridge0:ip=10.0.0.141
|
|
|
|
Environment=IPA_DM_PASSWORD=mysupersecurepassword
|
|
Environment=IPA_ADMIN_PASSWORD=mysupersecurepassword
|
|
|
|
PodmanArgs=--systemd=always --hostname=ipa.iot.cudanet.org --cgroupns=host --security-opt label=disable --add-host ipa.iot.cudanet.org:10.0.0.141
|
|
|
|
# THE CRITICAL CHANGE: Added --no-host-dns and --no-ntp
|
|
Exec=ipa-server-install -U -r IOT.CUDANET.ORG -p mysupersecurepassword -a mysupersecurepassword --no-ntp --no-host-dns
|
|
|
|
Volume=/var/podman/freeipa/data:/data:Z
|
|
AddCapability=CAP_SYS_ADMIN
|
|
AddCapability=CAP_NET_ADMIN
|
|
|
|
[Service]
|
|
Notify=false
|
|
Restart=on-failure
|
|
RestartSec=30
|
|
TimeoutStartSec=1800
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|