https://bugzilla.redhat.com/show_bug.cgi?id=1853261
Zbigniew Jędrzejewski-Szmek zbyszek@in.waw.pl changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |NEW Resolution|WONTFIX |--- Keywords| |Reopened
--- Comment #11 from Zbigniew Jędrzejewski-Szmek zbyszek@in.waw.pl --- Sorry, but that is not an acceptable answer.
After some discussion it looks like there is no point of SSSD working on read-only filesystem.
Let me quote the previous previous message:
but whenever a filesystem goes read-only, the only account we can get in to investigate with is either the "root" user via console, or a legacy LDAP user via "SSH".
If sssd was an opt-in thing, throwing up your hands and saying this is too hard to support would fine. But it is a default component in Fedora. This means that it also needs to solve the hard edge cases. The default authentication mechanism simply cannot stop working in a scenario which is a fairly common failure mode.