Misthios/bootc-images
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 3 Wiki Activity

fedora-cosmic: add Kanidm Unix authentication
Build containers / fedora-cosmic (rawhide) (push) Failing after 45s
Details
Build containers / fedora-cosmic (44) (push) Failing after 54s
Details

Browse Source 
Install kanidm-unixd-clients/kanidm-clients, point /etc/kanidm/config at
auth.plabble.org, configure unixd (TPM-backed cache, pam_allowed_login_groups),
and set up PAM/nsswitch via an authselect custom profile (with a direct-file
fallback). Enable kanidm-unixd{,-tasks} and make unconfined_service_t
permissive until Kanidm ships an SELinux policy.
This commit is contained in:
Misthios
2026-09-21 17:57:32 +02:00
parent de5b0f143a
commit dd2bf634f1
7 changed files with 118 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
images/fedora-cosmic/files/50-kanidm.preset
+3
View File
@@ -0,0 +1,3 @@
# Kanidm Unix authentication daemons.
enable kanidm-unixd.service
enable kanidm-unixd-tasks.service