URL:
https://github.com/freeipa/freeipa/pull/2770
Author: tiran
Title: #2770: [Backport][ipa-4-7] Don't configure KEYRING ccache in containers
Action: opened
PR body:
"""
Manual backport of PR #2677
Kernel keyrings are not namespaced yet. Keyrings can leak into other
containers. Therefore keyrings should not be used in containerized
environment.
Don't configure Kerberos to use KEYRING ccache backen when a container
environment is detected by systemd-detect-virt --container.
Fixes:
https://pagure.io/freeipa/issue/7807
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2770/head:pr2770
git checkout pr2770