[SSSD] [PATCH] Allow running with read only root

Simo Sorce ssorce at redhat.com
Wed Mar 24 14:04:14 UTC 2010


On Wed, 24 Mar 2010 14:51:07 +0100
Jakub Hrozek <jhrozek at redhat.com> wrote:

> Packages /etc/rwtab.d/sssd file that allows SSSD to run on a read-only
> root filesystem.

NACK.

The way rwtab normally works is that it creates a tmpfs and symlinks or
bind mounts it to the locations given by rwtab.

But this means the data will be discarded at the first reboot.

SSSD data is not just cache, sssd.ldb has to survive across reboots so
this approach is wrong. True sssd will start and work, except you will
loose everything on reboot.

I do not want to endorse, make it easy or even recommend to create such
a broken configuration.

/var/lib has to be writable and not shared if you want to run some
services, and if you want it read-only/shared/etc you better not use
sssd.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York



More information about the sssd-devel mailing list