mirror of
https://github.com/kanidm/kanidm.git
synced 2025-02-23 20:47:01 +01:00
805ac2dd16
* added python kanidm module * rewrote RADIUS integration * updated the documentation * updating github actions to run more often * BLEEP BLOOP ASYNCIO IS GR8 * adding config to makefile to run pykanidm tests Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Firstyear <william@blackhats.net.au>
58 lines
1.6 KiB
Docker
58 lines
1.6 KiB
Docker
FROM opensuse/tumbleweed:latest
|
|
|
|
EXPOSE 1812 1813
|
|
|
|
RUN zypper --gpg-auto-import-keys refresh --force
|
|
RUN zypper install -y \
|
|
freeradius-client \
|
|
freeradius-server \
|
|
freeradius-server-python3 \
|
|
freeradius-server-utils \
|
|
hostname \
|
|
python3 \
|
|
python3-devel \
|
|
python3-pip \
|
|
timezone \
|
|
iproute2 \
|
|
iputils \
|
|
curl
|
|
RUN zypper clean
|
|
|
|
ADD kanidm_rlm_python/mods-available/ /etc/raddb/mods-available/
|
|
COPY kanidm_rlm_python/sites-available/ /etc/raddb/sites-available/
|
|
|
|
# Set a working directory of /etc/raddb
|
|
WORKDIR /etc/raddb
|
|
|
|
# Enable the python and cache module.
|
|
RUN ln -s ../mods-available/python3 /etc/raddb/mods-enabled/python3
|
|
|
|
# disable auth via methods we don't support!
|
|
RUN rm /etc/raddb/mods-available/sql
|
|
RUN rm /etc/raddb/mods-enabled/{passwd,totp}
|
|
|
|
# Allows the radiusd user to write to the directory
|
|
RUN chown -R radiusd: /etc/raddb
|
|
RUN chmod 775 /etc/raddb/certs
|
|
RUN chmod 640 /etc/raddb/clients.conf
|
|
|
|
# install the packages
|
|
RUN mkdir -p /pkg/kanidmradius/kanidmradius/
|
|
COPY kanidm_rlm_python//kanidmradius/ /pkg/kanidmradius/kanidmradius/
|
|
COPY kanidm_rlm_python/pyproject.toml /pkg/kanidmradius/
|
|
|
|
RUN mkdir -p /pkg/pykanidm/
|
|
COPY pykanidm/ /pkg/pykanidm/
|
|
|
|
# install the package and its dependencies
|
|
RUN ln -s /etc/raddb/mods-config/python3/radiusd.py /usr/lib/python3.8/site-packages/
|
|
RUN python3 -m pip install --no-cache-dir --no-warn-script-location /pkg/pykanidm
|
|
RUN python3 -m pip install --no-cache-dir --no-warn-script-location /pkg/kanidmradius
|
|
# clean up after install
|
|
RUN rm -rf /pkg/*
|
|
|
|
USER radiusd
|
|
|
|
COPY kanidm_rlm_python/entrypoint.py /entrypoint.py
|
|
CMD [ "/usr/bin/python3", "/entrypoint.py" ]
|