File README.md of Package winbind-container

Overview Repositories Revisions Requests Users Attributes Meta

File README.md of Package winbind-container

# Winbind Container #

This container allows to deploy and run Winbind on ALP system with podman as
container runtime engine.

## Installation

* On the host, install the following packages: `podman systemd-experimental`
    `# transactional-update pkg in podman systemd-experimental`
* Ensure SELinux is configured in permissive mode
    * Edit `/etc/selinux/config`
    * Set `SELINUX=permisive`
    * Reboot
* Run the install label
    `podman container runlabel install registry.opensuse.org/home/scabrero/branches/suse/alp/workloads/tumbleweed_containerfiles/suse/alp/workloads/winbind:latest`

## Configure and join

* The install label will populate the host filesystem with the necessary
  files and directories
* Set the hostname
  `# nmcli general hostname <hostname>`
* Set the domain name in /etc/hosts
* Set DNS
  `nmcli connection edit <name>`
  `set ipv4.ignore-auto-dns true`
  `set ipv4.dns <ip>`
  `save`
* Edit and configure /etc/samba/smb.conf
    [global]
            workgroup = AFOREST
            realm = AFOREST.AD
            security = ADS
            idmap config AFOREST : range = 10000-19999
            idmap config AFOREST : backend = rid
            idmap config * : range = 100000-109999
            idmap config * : backend = tdb
            winbind varlink service = yes
* Join
    `podman container runlabel join registry.opensuse.org/home/scabrero/branches/suse/alp/workloads/tumbleweed_containerfiles/suse/alp/workloads/winbind:latest -- -U<username>%<password>`

## Run

* Start the winbind container
    `systemctl start winbind`

## Check

* AD users available on ALP host
    `# getent -spasswd:systemd passwd AFOREST\\administrator`
    `AFOREST\administrator:x:10500:10513:AFOREST\administrator:/home/AFOREST/administrator:/bin/false`

## Uninstall

* Stop container
    `systemctl stop winbind`

* Run the uninstall label
    `podman container runlabel uninstall registry.opensuse.org/home/scabrero/branches/suse/alp/workloads/tumbleweed_containerfiles/suse/alp/workloads/winbind:latest`

* TODO Add prune label to remove tdb files from host

Places

File README.md of Package winbind-container

Places