docker容器上的SSSD (Ubuntu)

Question

我正在尝试将ubuntu docker容器与FreeIPA集成，在安装FreeIPA-client -install时遇到以下错误

Created /etc/ipa/default.conf
New SSSD config will be created
Configured sudoers in /etc/nsswitch.conf
Configured /etc/sssd/sssd.conf
Configured /etc/krb5.conf for IPA realm BLABS.COM
trying https://vilma.com/ipa/json
Forwarding 'ping' to json server 'https://vilma.com/ipa/json'
Forwarding 'ca_is_enabled' to json server 'https://vilma.com/ipa/json'
Systemwide CA database updated.
Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub
Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
Forwarding 'host_mod' to json server 'https://vilma/ipa/json'
SSSD enabled
SSSD service restart was unsuccessful.
Configured /etc/openldap/ldap.conf
Unable to find 'admin' user with 'getent passwd admin@vilma.com'!
Unable to reliably detect configuration. Check NSS setup manually.
NTP enabled

我尝试手动启动sssd，方法是键入sssd并得到以下消息

 ldb: unable to open modules directory '/usr/lib/x86_64-linux-gnu/ldb/modules/ldb' - Permission denied
 (Sun Oct 14 20:55:17:078716 2018) [sssd] [load_configuration] (0x0010): The confdb initialization failed
(Sun Oct 14 20:55:17:078750 2018) [sssd] [main] (0x0020): SSSD couldn't load the configuration database.

非常感谢你的帮助

Answer 1

如果其他人遇到这种情况，问题是docker使用的overlayfs会导致sssd正在使用的ldb数据库出现问题。

因此，您需要：

在容器中启动Dockerfile

• then，之前，您必须创建一个空卷并将其装载到/usr/lib/x86_64-linux-gnu/ldb/modules/ldb

• then中将/usr/lib/x86_64-linux-gnu/ldb/modules/ldb的原始内容从/usr/lib/x86_64-linux-gnu/ldb/modules/ldb-orig拷贝到新卷

• 中，然后启动container

Answer 2

这似乎在Linux 5.8中得到了修复。我想是这个fix，但我不确定。

Answer 3

我可以通过不使用sssd (--no-sssd选项)来管理解决方法