Skip to content

Conversation

@krnowak
Copy link
Member

@krnowak krnowak commented Feb 27, 2024

CI: http://localhost:8080/job/container/job/sdk/2363/cldsv/

Needs flatcar/baselayout#38 first.

  • Move sys-auth/pambase to portage stable.
    • It has two user-patches, one could maybe be upstreamed, the other one is some Flatcar modifications.
    • The first user patch is a slight rework of some session stuff to make it unnecessary for systemd-user and system-run0 PAM config files from sys-apps/systemd to catch up with changes in pambase.
    • The second user patch consists mostly of some Flatcar-specific modifications, so the files do not differ too greatly from what we used to have (mostly timeouts, and dropped some sssd-related checks).
  • Pull in baselayout with its pam config files removed.
  • Move sys-libs/pam to portage stable.
  • Update some packages through coreos/config/env to move their pam configs to vendor directory.
  • Clean up messed up pam vendor directories.
    • The mess was that we had /usr/lib/pam.d, /usr/lib/pam and /usr/share/pam.d directories. PAM config files were either in /usr/lib/pam.d or in /usr/share/pam.d. /usr/lib/pam was only for the /usr/lib/pam/security directory.
    • Defaults to /usr/lib/pam as a vendor directory.
      • I wasn't entirely sure which directory to pick up for vendor directory, just went with one. Made the other directories symlinks to this one.
  • Add a check to prod_image_util to verify that all pam config files have their copies in vendor directory.

--

  • Changelog entries added in the respective changelog/ directory (user-facing change, bug fix, security fix, update)
  • Inspected CI output for image differences: /boot and /usr size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.

@krnowak krnowak added the main label Feb 27, 2024
@krnowak
Copy link
Member Author

krnowak commented Nov 12, 2025

@chewi: Thanks for the review. :) Can I haz a review also for baselayout PR, that this PR is using? flatcar/baselayout#38

Thanks!

It's a patch for adding the account locking functionality.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
This is meant to be used by packages installing pam config files. The
function should be invoked in a post src_install hook.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
It's from Gentoo commit 197e3931b76a596e0df99bd22809d1db04ec5131.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
This is to make sure that all the packages installing pam configs
actually have them in the vendor directory.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
It's from Gentoo commit f32e281b3b124b273302ddffeb06c0e6f20852e9.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
We are building sssd on arm64, so drop the unnecessary code. Also
create some more compatibility symlinks.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Use the default location for pam configs. We replace them with our own
in post_src_install hook anyway.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
…ages

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
This already should be taken care of by open-vm-tools post install
hooks.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
It's from Gentoo commit 0ad96e879b651cc7e8214159d5841d6b633bef8a.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
@krnowak krnowak merged commit 5d49390 into main Nov 12, 2025
1 of 5 checks passed
@github-project-automation github-project-automation bot moved this from ✅ Testing / in Review to Implemented in Flatcar tactical, release planning, and roadmap Nov 12, 2025
@krnowak krnowak deleted the krnowak/pam branch November 12, 2025 17:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

Development

Successfully merging this pull request may close these issues.

3 participants