freeipa server

• https://www.freeipa.org/page/Docker
• https://hub.docker.com/r/freeipa/freeipa-server/

prepare

net.ipv6.conf.all.disable_ipv6 = 0
net.ipv6.conf.default.disable_ipv6 = 0
net.ipv6.conf.lo.disable_ipv6 = 0
net.ipv6.conf.eth0.disable_ipv6 = 0

ping6 ::1
ping6 localhost

install

export NAME=ipa-master
export IMAGE=freeipa/freeipa-server:fedora-27

docker run -ti --rm --privileged \
  -v /:/host \
  -e HOST=/host \
  -e DATADIR=/data/${NAME} \
  -e NAME=${NAME} \
  -e IMAGE=${IMAGE} ${IMAGE} \
  /bin/install.sh --hostname ipa.newops.cn

run

docker run -it -d --privileged --restart=always --name ${NAME} \
    -h ipa.newops.cn \
    -e IPA_SERVER_IP=x.x.x.x \
    -p 80:80 \
    -p 443:443 \
    -p 389:389 \
    -p 636:636 \
    -p 88:88 \
    -p 464:464 \
    -p 88:88/udp \
    -p 464:464/udp \
    -v /data/${NAME}:/data:Z \
    -v /sys/fs/cgroup:/sys/fs/cgroup:ro \
    --tmpfs /run --tmpfs /tmp \
    -v /dev/urandom:/dev/random:ro ${IMAGE}