kanidm/kanidm_rlm_python/Dockerfile

58 lines
1.6 KiB
Docker
Raw Normal View History

FROM opensuse/tumbleweed:latest
EXPOSE 1812 1813
RUN zypper --gpg-auto-import-keys refresh --force
RUN zypper install -y \
freeradius-client \
freeradius-server \
freeradius-server-python3 \
freeradius-server-utils \
hostname \
python3 \
python3-devel \
python3-pip \
timezone \
iproute2 \
iputils \
curl
RUN zypper clean
ADD kanidm_rlm_python/mods-available/ /etc/raddb/mods-available/
COPY kanidm_rlm_python/sites-available/ /etc/raddb/sites-available/
# Set a working directory of /etc/raddb
WORKDIR /etc/raddb
# Enable the python and cache module.
2020-08-17 09:16:33 +02:00
RUN ln -s ../mods-available/python3 /etc/raddb/mods-enabled/python3
# disable auth via methods we don't support!
RUN rm /etc/raddb/mods-available/sql
RUN rm /etc/raddb/mods-enabled/{passwd,totp}
# Allows the radiusd user to write to the directory
RUN chown -R radiusd: /etc/raddb
RUN chmod 775 /etc/raddb/certs
RUN chmod 640 /etc/raddb/clients.conf
# install the packages
RUN mkdir -p /pkg/kanidmradius/kanidmradius/
COPY kanidm_rlm_python//kanidmradius/ /pkg/kanidmradius/kanidmradius/
COPY kanidm_rlm_python/pyproject.toml /pkg/kanidmradius/
RUN mkdir -p /pkg/pykanidm/
COPY pykanidm/ /pkg/pykanidm/
# install the package and its dependencies
RUN ln -s /etc/raddb/mods-config/python3/radiusd.py /usr/lib/python3.8/site-packages/
RUN python3 -m pip install --no-cache-dir --no-warn-script-location /pkg/pykanidm
RUN python3 -m pip install --no-cache-dir --no-warn-script-location /pkg/kanidmradius
# clean up after install
RUN rm -rf /pkg/*
USER radiusd
COPY kanidm_rlm_python/entrypoint.py /entrypoint.py
2020-08-17 09:16:33 +02:00
CMD [ "/usr/bin/python3", "/entrypoint.py" ]