File _service:obs_scm:container.obscpio of Package winbind-container

Overview Repositories Revisions Requests Users Attributes Meta

File _service:obs_scm:container.obscpio of Package winbind-container (Revision d60bbc287dcaa7d232492ac3bf904685)

Currently displaying revision d60bbc287dcaa7d232492ac3bf904685 , Show latest

07070100000000000081A400000000000000000000000163E24F9300000A3F000000000000000000000000000000000000001800000000container/label-install#!/bin/sh -eux

# This is the install script for winbind when run in a privileged container.
#
# The host file system must be mounted at /host

cd /
PATH="/usr/bin:/usr/sbin"
: "${HOST:=/host}"
: "${ORIGIN:=}"

if [ ! -d $HOST/etc ] || [ ! -d $HOST/proc ] || [ ! -d $HOST/run ]; then
    echo "winbind-install: host file system is not mounted at $HOST"
    exit 1
fi

if [ -f $HOST/usr/sbin/winbindd ]; then
    echo "winbind-install: winbind must not be installed in the host."
    exit 1
fi
if [ ! -f $HOST/usr/lib*/libnss_systemd.so.* ]; then
    echo "winbind-install: nss-systemd package must be installed on host system."
    exit 1
fi

# Patch nsswitch.conf
if [ ! -e $HOST/etc/nsswitch.conf ]; then
    grep -q 'passwd.*systemd' $HOST/usr/etc/nsswitch.conf
    RETVAL=$?
    if [ $RETVAL -ne 0 ]; then
	cp $HOST/usr/etc/nsswitch.conf $HOST/etc/nsswitch.conf
	pushd $HOST/etc
	patch -p0 -b -z .winbind-installer < $ORIGIN/container/nsswitch.conf.patch
	RETVAL=$?
	if [ $RETVAL -ne 0 ]; then
		echo "unable to create /etc/nsswitch.conf with nss-systemd enabled "
		echo "winbind-install: nss-systemd is not configured in /etc/nsswitch.conf nor /usr/etc/nsswitch.conf, check man nss-systemd "
		echo "try applying the following patch to /etc/nsswitch.conf (/usr/etc/nsswitch.conf is the umodified file) "
		cat $ORIGIN/container/nsswitch.conf.patch
		exit 1
	fi
	popd
    fi
else
	grep -q 'passwd.*systemd' $HOST/etc/nsswitch.conf
	RETVAL=$?
	if [ $RETVAL -ne 0 ]; then
		echo "winbind-install: nss-systemd is not configured in /etc/nsswitch.conf nor /usr/etc/nsswitch.conf, check man nss-systemd "
	        echo "try applying the following patch to /etc/nsswitch.conf (/usr/etc/nsswitch.conf is the umodified file) "
		cat $ORIGIN/container/nsswitch.conf.patch
		exit 1
	fi
fi

# Install smb.conf and sysconfig files
if [ ! -d $HOST/etc/samba ]; then
	mkdir -p $HOST/etc/samba
fi
if [ ! -e $HOST/sysconfig/samba ]; then
	cp -avr $ORIGIN/etc/sysconfig/samba $HOST/etc/sysconfig/samba
else
	fillup -m $HOST/etc/sysconfig/samba $ORIGIN/etc/sysconfig/samba $HOST/etc/sysconfig/samba
fi

# For podman, generate a systemd unit for starting on boot
if [ "${container:-}" = podman ] && [ -n "$IMAGE" ]; then
    if [ ! -e $HOST/etc/systemd/system/winbind.service ]; then
        mkdir -p $HOST/etc/systemd/system/
        cp $ORIGIN/container/systemd/winbind.service $HOST/etc/systemd/system/winbind.service
        sed -e "s,%IMAGE%,${IMAGE},g;s,%PODMAN_RUN_WINBIND_STANDALONE_OPTIONS%,_PODMAN_RUN_WINBIND_STANDALONE_OPTIONS_,g" $ORIGIN/container/systemd/winbind.service > $HOST/etc/systemd/system/winbind.service
    fi
fi
07070100000001000081A400000000000000000000000163E24F9300000288000000000000000000000000000000000000001A00000000container/label-uninstall#!/bin/sh -eux

# This is the uninstall script for winbind when run in a privileged container.
#
# The host file system must be mounted at /host

cd /
PATH="/usr/bin:/usr/sbin"

if [ ! -d /host/etc ] || [ ! -d /host/proc ] || [ ! -d /host/run ]; then
    echo "winbind-uninstall: host file system is not mounted at /host"
    exit 1
fi

# Remove unit file
rm -fr /etc/systemd/system/winbind.service

# Uninstall sysconfig
fillup -m -r /host/etc/sysconfig/samba /etc/sysconfig/samba /host/etc/sysconfig/samba
mv /host/etc/sysconfig/samba.new /host/etc/sysconfig/samba
if [ ! -s /host/etc/sysconfig/samba.new ]; then
	rm /host/etc/sysconfig/samba
fi
07070100000002000081A400000000000000000000000163E24F930000024D000000000000000000000000000000000000001E00000000container/nsswitch.conf.patch--- nsswitch.conf	2022-06-29 16:10:21.000000000 +0200
+++ nsswitch.conf	2022-07-04 16:42:20.648380137 +0200
@@ -52,9 +52,9 @@
 # shadow:    db files
 # group:     db files
 
-passwd:		compat
-group:		compat
-shadow:		compat
+passwd:		compat systemd
+group:		compat [SUCCESS=merge] systemd
+shadow:		compat systemd
 # Allow initgroups to default to the setting for group.
 # initgroups:	compat
 
@@ -63,7 +63,7 @@
 
 aliases:	files usrfiles
 ethers:		files usrfiles
-gshadow:	files usrfiles
+gshadow:	files usrfiles systemd
 netgroup:	files nis
 protocols:	files usrfiles
 publickey:	files
07070100000003000041ED00000000000000000000000263E24F9300000000000000000000000000000000000000000000001200000000container/systemd07070100000004000081A400000000000000000000000163E24F9300000395000000000000000000000000000000000000002200000000container/systemd/winbind.service[Unit]
Description=Samba Winbind container
Documentation=https://gitlab.com/scabrero/winbind-container
After=network.target nmb.service
Before=nss-user-lookup.target
Wants=nss-user-lookup.target
RequiresMountsFor=%t/containers

[Service]
Environment=PODMAN_SYSTEMD_UNIT=%n
Type=notify
PIDFile=/run/samba/winbindd.pid
Environment=KRB5CCNAME=/run/samba/krb5cc_samba
Environment=KRB5RCACHEDIR=/var/cache/krb5rcache
ExecStartPre=/bin/rm -f %t/%n.ctr-id
ExecStart=/usr/sbin/winbindd --foreground --no-process-group $WINBINDOPTIONS
ExecStart=/usr/bin/podman run --cidfile=%t/%n.ctr-id --cgroups=no-conmon --rm --sdnotify=conmon --replace --name winbind %PODMAN_RUN_WINBIND_STANDALONE_OPTIONS% %IMAGE%
ExecStop=/usr/bin/podman stop --ignore --cidfile=%t/%n.ctr-id
ExecStopPost=/usr/bin/podman rm -f --ignore --cidfile=%t/%n.ctr-id
ExecReload=/bin/kill -HUP $MAINPID
LimitCORE=infinity

[Install]
WantedBy=multi-user.target
07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000B00000000TRAILER!!!11 blocks

Places

File _service:obs_scm:container.obscpio of Package winbind-container (Revision d60bbc287dcaa7d232492ac3bf904685)

Places