ehlo,
This ticket is little bit related to #2855
I searched a little bit and here is a small sumary of using autofs + atomic (containers)
We have a pull request in RUNC to eliminate our patch.
https://github.com/opencontainers/runc/pull/208
A second feature of this pull request would be to allow us to pass in the MOUNT_SHARED flag This would allow us to modify the hosts mount table from inside of a container. With this feature we would be able to run a service like autofs inside of a container but have it modify the HOST file system and those of other containers.
I think if we want to get autofs to work on "atomic host" we need to run it in a container.
The attached patch will reduce dependency tree in such container.
I created patch with separate pacakge because "sss" is not by default in nsswithc.conf for "automount". But this file could be part of sssd-client but on the other hand automount directly dlopen libsss_autofs.so I'm not sure which solution would be better.
LS
On Mon, Jan 18, 2016 at 02:18:32PM +0100, Lukas Slebodnik wrote:
ehlo,
This ticket is little bit related to #2855
I searched a little bit and here is a small sumary of using autofs + atomic (containers)
We have a pull request in RUNC to eliminate our patch.
https://github.com/opencontainers/runc/pull/208
A second feature of this pull request would be to allow us to pass in the MOUNT_SHARED flag This would allow us to modify the hosts mount table from inside of a container. With this feature we would be able to run a service like autofs inside of a container but have it modify the HOST file system and those of other containers.
I think if we want to get autofs to work on "atomic host" we need to run it in a container.
The attached patch will reduce dependency tree in such container.
I created patch with separate pacakge because "sss" is not by default in nsswithc.conf for "automount". But this file could be part of sssd-client but on the other hand automount directly dlopen libsss_autofs.so I'm not sure which solution would be better.
LS
From 64db47c3fb09648f84cd359ec8c1cc28a49fd430 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik lslebodn@redhat.com Date: Mon, 18 Jan 2016 13:47:11 +0100 Subject: [PATCH] SPEC: Move libsss_autofs.so outside sssd-common
It will reduce dependency chain in container world. libsss_autofs.so depends only on libc and requires sssd unix sockets. And sssd-common has many requirements.
[..]
+%files -n libsss_autofs +%defattr(-,root,root,-) +%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER
Why do we need COPYING.LESSER? IIRC all our code is only GPLv3+
Also, while looking at this patch I realized that with libsss_sudo we call ldconfig even though the library is not supposed to be linked with but dlopened (yes, it's a bug that the sudo library is placed in libdir..)
On (02/02/16 15:35), Jakub Hrozek wrote:
On Mon, Jan 18, 2016 at 02:18:32PM +0100, Lukas Slebodnik wrote:
ehlo,
This ticket is little bit related to #2855
I searched a little bit and here is a small sumary of using autofs + atomic (containers)
We have a pull request in RUNC to eliminate our patch.
https://github.com/opencontainers/runc/pull/208
A second feature of this pull request would be to allow us to pass in the MOUNT_SHARED flag This would allow us to modify the hosts mount table from inside of a container. With this feature we would be able to run a service like autofs inside of a container but have it modify the HOST file system and those of other containers.
I think if we want to get autofs to work on "atomic host" we need to run it in a container.
The attached patch will reduce dependency tree in such container.
I created patch with separate pacakge because "sss" is not by default in nsswithc.conf for "automount". But this file could be part of sssd-client but on the other hand automount directly dlopen libsss_autofs.so I'm not sure which solution would be better.
LS
From 64db47c3fb09648f84cd359ec8c1cc28a49fd430 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik lslebodn@redhat.com Date: Mon, 18 Jan 2016 13:47:11 +0100 Subject: [PATCH] SPEC: Move libsss_autofs.so outside sssd-common
It will reduce dependency chain in container world. libsss_autofs.so depends only on libc and requires sssd unix sockets. And sssd-common has many requirements.
[..]
+%files -n libsss_autofs +%defattr(-,root,root,-) +%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER
Why do we need COPYING.LESSER? IIRC all our code is only GPLv3+
Also, while looking at this patch I realized that with libsss_sudo we call ldconfig even though the library is not supposed to be linked with but dlopened (yes, it's a bug that the sudo library is placed in libdir..)
looks like no sh$ grep -A5 libsss_autofs_la_SOURCES Makefile.am libsss_autofs_la_SOURCES = \ src/sss_client/common.c \ src/sss_client/sss_cli.h \ src/sss_client/autofs/sss_autofs.c \ src/sss_client/autofs/sss_autofs_private.h
sh$ head -n 25 src/sss_client/common.c /* * System Security Services Daemon. NSS client interface * * Copyright (C) Simo Sorce 2007 * * Winbind derived code: * Copyright (C) Tim Potter 2000 * Copyright (C) Andrew Tridgell 2000 * Copyright (C) Andrew Bartlett 2002 * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU Lesser General Public License as * published by the Free Software Foundation; either version 2.1 of the * License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this program. If not, see http://www.gnu.org/licenses/. */ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
LS
On (02/02/16 16:59), Lukas Slebodnik wrote:
On (02/02/16 15:35), Jakub Hrozek wrote:
On Mon, Jan 18, 2016 at 02:18:32PM +0100, Lukas Slebodnik wrote:
ehlo,
This ticket is little bit related to #2855
I searched a little bit and here is a small sumary of using autofs + atomic (containers)
We have a pull request in RUNC to eliminate our patch.
https://github.com/opencontainers/runc/pull/208
A second feature of this pull request would be to allow us to pass in the MOUNT_SHARED flag This would allow us to modify the hosts mount table from inside of a container. With this feature we would be able to run a service like autofs inside of a container but have it modify the HOST file system and those of other containers.
I think if we want to get autofs to work on "atomic host" we need to run it in a container.
The attached patch will reduce dependency tree in such container.
I created patch with separate pacakge because "sss" is not by default in nsswithc.conf for "automount". But this file could be part of sssd-client but on the other hand automount directly dlopen libsss_autofs.so I'm not sure which solution would be better.
LS
From 64db47c3fb09648f84cd359ec8c1cc28a49fd430 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik lslebodn@redhat.com Date: Mon, 18 Jan 2016 13:47:11 +0100 Subject: [PATCH] SPEC: Move libsss_autofs.so outside sssd-common
It will reduce dependency chain in container world. libsss_autofs.so depends only on libc and requires sssd unix sockets. And sssd-common has many requirements.
[..]
+%files -n libsss_autofs +%defattr(-,root,root,-) +%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER
Why do we need COPYING.LESSER? IIRC all our code is only GPLv3+
Also, while looking at this patch I realized that with libsss_sudo we call ldconfig even though the library is not supposed to be linked with but dlopened (yes, it's a bug that the sudo library is placed in libdir..)
looks like no sh$ grep -A5 libsss_autofs_la_SOURCES Makefile.am libsss_autofs_la_SOURCES = \ src/sss_client/common.c \ src/sss_client/sss_cli.h \ src/sss_client/autofs/sss_autofs.c \ src/sss_client/autofs/sss_autofs_private.h
sh$ head -n 25 src/sss_client/common.c /*
- System Security Services Daemon. NSS client interface
- Copyright (C) Simo Sorce 2007
- Winbind derived code:
- Copyright (C) Tim Potter 2000
- Copyright (C) Andrew Tridgell 2000
- Copyright (C) Andrew Bartlett 2002
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU Lesser General Public License as
- published by the Free Software Foundation; either version 2.1 of the
- License, or (at your option) any later version.
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU Lesser General Public License for more details.
- You should have received a copy of the GNU Lesser General Public License
- along with this program. If not, see http://www.gnu.org/licenses/.
*/ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
BTW we have LGPL in following files.
LGPL ---- sssd-1.13.3/src/tests/safe-format-tests.c sssd-1.13.3/src/util/safe-format-string.h
LGPL (v2 or later) ------------------ sssd-1.13.3/src/util/safe-format-string.c
LGPL (v2.1 or later) -------------------- sssd-1.13.3/src/sss_client/common.c sssd-1.13.3/src/sss_client/nss_group.c sssd-1.13.3/src/sss_client/nss_mc.h sssd-1.13.3/src/sss_client/nss_mc_common.c sssd-1.13.3/src/sss_client/nss_mc_group.c sssd-1.13.3/src/sss_client/nss_mc_initgr.c sssd-1.13.3/src/sss_client/nss_mc_passwd.c sssd-1.13.3/src/sss_client/nss_passwd.c
LGPL (v3 or later) ------------------ sssd-1.13.3/src/sss_client/autofs/autofs_test_client.c sssd-1.13.3/src/sss_client/libwbclient/libwbclient.h sssd-1.13.3/src/sss_client/libwbclient/wbc_ctx_sssd.c sssd-1.13.3/src/sss_client/libwbclient/wbc_err_internal.h sssd-1.13.3/src/sss_client/libwbclient/wbc_guid.c sssd-1.13.3/src/sss_client/libwbclient/wbc_idmap_common.c sssd-1.13.3/src/sss_client/libwbclient/wbc_idmap_sssd.c sssd-1.13.3/src/sss_client/libwbclient/wbc_pam_sssd.c sssd-1.13.3/src/sss_client/libwbclient/wbc_pwd_sssd.c sssd-1.13.3/src/sss_client/libwbclient/wbc_sid_common.c sssd-1.13.3/src/sss_client/libwbclient/wbc_sid_sssd.c sssd-1.13.3/src/sss_client/libwbclient/wbc_sssd_internal.h sssd-1.13.3/src/sss_client/libwbclient/wbc_util_common.c sssd-1.13.3/src/sss_client/libwbclient/wbc_util_sssd.c sssd-1.13.3/src/sss_client/libwbclient/wbclient_common.c sssd-1.13.3/src/sss_client/libwbclient/wbclient_internal.h sssd-1.13.3/src/sss_client/libwbclient/wbclient_sssd.c sssd-1.13.3/src/sss_client/libwbclient/wbclient_sssd.h sssd-1.13.3/src/sss_client/pam_message.c sssd-1.13.3/src/sss_client/pam_message.h sssd-1.13.3/src/sss_client/pam_sss.c sssd-1.13.3/src/sss_client/pam_test_client.c sssd-1.13.3/src/sss_client/sss_cli.h sssd-1.13.3/src/sss_client/sss_pam_compat.h sssd-1.13.3/src/sss_client/sss_pam_macros.h sssd-1.13.3/src/sss_client/sssd_pac.c sssd-1.13.3/src/util/util_safealign.h
LS
On Tue, Feb 02, 2016 at 05:22:58PM +0100, Lukas Slebodnik wrote:
On (02/02/16 16:59), Lukas Slebodnik wrote:
On (02/02/16 15:35), Jakub Hrozek wrote:
On Mon, Jan 18, 2016 at 02:18:32PM +0100, Lukas Slebodnik wrote:
ehlo,
This ticket is little bit related to #2855
I searched a little bit and here is a small sumary of using autofs + atomic (containers)
We have a pull request in RUNC to eliminate our patch.
https://github.com/opencontainers/runc/pull/208
A second feature of this pull request would be to allow us to pass in the MOUNT_SHARED flag This would allow us to modify the hosts mount table from inside of a container. With this feature we would be able to run a service like autofs inside of a container but have it modify the HOST file system and those of other containers.
I think if we want to get autofs to work on "atomic host" we need to run it in a container.
The attached patch will reduce dependency tree in such container.
I created patch with separate pacakge because "sss" is not by default in nsswithc.conf for "automount". But this file could be part of sssd-client but on the other hand automount directly dlopen libsss_autofs.so I'm not sure which solution would be better.
LS
From 64db47c3fb09648f84cd359ec8c1cc28a49fd430 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik lslebodn@redhat.com Date: Mon, 18 Jan 2016 13:47:11 +0100 Subject: [PATCH] SPEC: Move libsss_autofs.so outside sssd-common
It will reduce dependency chain in container world. libsss_autofs.so depends only on libc and requires sssd unix sockets. And sssd-common has many requirements.
[..]
+%files -n libsss_autofs +%defattr(-,root,root,-) +%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER
Why do we need COPYING.LESSER? IIRC all our code is only GPLv3+
Also, while looking at this patch I realized that with libsss_sudo we call ldconfig even though the library is not supposed to be linked with but dlopened (yes, it's a bug that the sudo library is placed in libdir..)
looks like no
OK, ACK
On (09/02/16 15:45), Jakub Hrozek wrote:
On Tue, Feb 02, 2016 at 05:22:58PM +0100, Lukas Slebodnik wrote:
On (02/02/16 16:59), Lukas Slebodnik wrote:
On (02/02/16 15:35), Jakub Hrozek wrote:
On Mon, Jan 18, 2016 at 02:18:32PM +0100, Lukas Slebodnik wrote:
ehlo,
This ticket is little bit related to #2855
I searched a little bit and here is a small sumary of using autofs + atomic (containers)
We have a pull request in RUNC to eliminate our patch.
https://github.com/opencontainers/runc/pull/208
A second feature of this pull request would be to allow us to pass in the MOUNT_SHARED flag This would allow us to modify the hosts mount table from inside of a container. With this feature we would be able to run a service like autofs inside of a container but have it modify the HOST file system and those of other containers.
I think if we want to get autofs to work on "atomic host" we need to run it in a container.
The attached patch will reduce dependency tree in such container.
I created patch with separate pacakge because "sss" is not by default in nsswithc.conf for "automount". But this file could be part of sssd-client but on the other hand automount directly dlopen libsss_autofs.so I'm not sure which solution would be better.
LS
From 64db47c3fb09648f84cd359ec8c1cc28a49fd430 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik lslebodn@redhat.com Date: Mon, 18 Jan 2016 13:47:11 +0100 Subject: [PATCH] SPEC: Move libsss_autofs.so outside sssd-common
It will reduce dependency chain in container world. libsss_autofs.so depends only on libc and requires sssd unix sockets. And sssd-common has many requirements.
[..]
+%files -n libsss_autofs +%defattr(-,root,root,-) +%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER
Why do we need COPYING.LESSER? IIRC all our code is only GPLv3+
Also, while looking at this patch I realized that with libsss_sudo we call ldconfig even though the library is not supposed to be linked with but dlopened (yes, it's a bug that the sudo library is placed in libdir..)
looks like no
OK, ACK
master: * d862e55716e1b24168fd5deef44c4f9deb7c0709
LS
sssd-devel@lists.fedorahosted.org
-
Jakub Hrozek -
Lukas Slebodnik