- Implemented sync-roles.sh to synchronize Active Directory group memberships as MariaDB roles and user accounts. - Created Containerfile for building a custom ldap2pg image with patched YAML decoding. - Added provision-user-db.sh for provisioning user databases and roles based on LDAP synchronization. - Introduced a new Containerfile for MariaDB with PAM authentication via pam_ldap. - Configured PAM service for MariaDB logins and added necessary plugins for LDAP authentication. - Implemented health checks and entrypoint scripts for MariaDB and pgpool containers. - Enhanced PostgreSQL image with additional extensions and custom pg_hba.conf for improved security and functionality.
16 lines
375 B
Docker
16 lines
375 B
Docker
ARG ALPINE=latest
|
|
FROM alpine:${ALPINE}
|
|
|
|
RUN apk add --no-cache \
|
|
bash \
|
|
openldap-clients \
|
|
mariadb-client \
|
|
ca-certificates \
|
|
&& update-ca-certificates
|
|
|
|
WORKDIR /workspace
|
|
COPY --chmod=0755 sync-roles.sh /workspace/sync-roles.sh
|
|
COPY --chmod=0755 provision-user-db.sh /workspace/provision-user-db.sh
|
|
|
|
ENTRYPOINT ["/bin/bash"]
|
|
CMD ["sync-roles.sh"] |