Compare commits
9
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
8742addf3d | ||
|
|
f0252a0b9b | ||
|
|
03f65c7695 | ||
|
|
f637e30fa2 | ||
|
|
f004800174 | ||
|
|
baf11e3eed | ||
|
|
7af58a2738 | ||
|
|
dfa2e5a1ae | ||
|
|
22b8e68ca8 |
No files matched your search
+1
-1
@@ -59,7 +59,7 @@ RUN sed -i 's/^Types: deb$/Types: deb deb-src/' /etc/apt/sources.list.d/debian.s
|
|||||||
|
|
||||||
RUN sed -i '/%users/s/^/# /' /etc/sudoers && \
|
RUN sed -i '/%users/s/^/# /' /etc/sudoers && \
|
||||||
echo "sudoers: files sss" >> /etc/nsswitch.conf && \
|
echo "sudoers: files sss" >> /etc/nsswitch.conf && \
|
||||||
echo "session required pam_mkhomedir.so skel=/etc/skel/ umask=0022" >> /etc/pam.d/common-session
|
echo "session required pam_mkhomedir.so skel=/etc/skel/ umask=0077" >> /etc/pam.d/common-session
|
||||||
|
|
||||||
RUN chmod 440 /etc/sudoers && \
|
RUN chmod 440 /etc/sudoers && \
|
||||||
mkdir -p /etc/sssd && chown root:root /etc/sssd && chmod 755 /etc/sssd && \
|
mkdir -p /etc/sssd && chown root:root /etc/sssd && chmod 755 /etc/sssd && \
|
||||||
|
|||||||
+2
-6
@@ -55,15 +55,11 @@ RUN sed -i 's/^Types: deb$/Types: deb deb-src/' /etc/apt/sources.list.d/debian.s
|
|||||||
dpkg-reconfigure -f noninteractive tzdata && \
|
dpkg-reconfigure -f noninteractive tzdata && \
|
||||||
printf 'XKBMODEL="pc105"\nXKBLAYOUT="%s"\nXKBVARIANT=""\nXKBOPTIONS=""\nBACKSPACE="guess"\n' "${COUNTRY}" > /etc/default/keyboard && \
|
printf 'XKBMODEL="pc105"\nXKBLAYOUT="%s"\nXKBVARIANT=""\nXKBOPTIONS=""\nBACKSPACE="guess"\n' "${COUNTRY}" > /etc/default/keyboard && \
|
||||||
dpkg-reconfigure -f noninteractive keyboard-configuration && \
|
dpkg-reconfigure -f noninteractive keyboard-configuration && \
|
||||||
rm -rf /var/lib/apt/lists/* /tmp/packages.txt
|
rm -rf /var/lib/apt/lists/* /tmp/packages.txt
|
||||||
|
|
||||||
# NEU: Systemweite statische Konfigurationen für LDAP/PAM/Sudo
|
|
||||||
# 1. Entfernt die gefährliche %users Regel
|
|
||||||
# 2. Sagt nsswitch, dass Sudoers auch im SSS (LDAP) gesucht werden sollen
|
|
||||||
# 3. Aktiviert das automatische Erstellen von Home-Verzeichnissen (mkhomedir)
|
|
||||||
RUN sed -i '/%users/s/^/# /' /etc/sudoers && \
|
RUN sed -i '/%users/s/^/# /' /etc/sudoers && \
|
||||||
echo "sudoers: files sss" >> /etc/nsswitch.conf && \
|
echo "sudoers: files sss" >> /etc/nsswitch.conf && \
|
||||||
echo "session required pam_mkhomedir.so skel=/etc/skel/ umask=0022" >> /etc/pam.d/common-session
|
echo "session required pam_mkhomedir.so skel=/etc/skel/ umask=0077" >> /etc/pam.d/common-session
|
||||||
|
|
||||||
RUN chmod 440 /etc/sudoers && \
|
RUN chmod 440 /etc/sudoers && \
|
||||||
mkdir -p /etc/sssd && chown root:root /etc/sssd && chmod 755 /etc/sssd && \
|
mkdir -p /etc/sssd && chown root:root /etc/sssd && chmod 755 /etc/sssd && \
|
||||||
|
|||||||
@@ -15,8 +15,8 @@ This repository is built and pushed automatically.
|
|||||||
### 🏗️ Platform Support
|
### 🏗️ Platform Support
|
||||||
| Architecture | Status | Base Image | Build Date |
|
| Architecture | Status | Base Image | Build Date |
|
||||||
| :--- | :--- | :--- | :--- |
|
| :--- | :--- | :--- | :--- |
|
||||||
| x86_64 (amd64) | ✅ Active | debian:bookworm | 10.10.2026 00:57 |
|
| x86_64 (amd64) | ✅ Active | debian:bookworm | 10.10.2026 14:31 |
|
||||||
| aarch64 (arm64) | ✅ Active | debian:bookworm | 10.10.2026 00:57 |
|
| aarch64 (arm64) | ✅ Active | debian:bookworm | 10.10.2026 14:31 |
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
@@ -26,7 +26,7 @@ This repository is built and pushed automatically.
|
|||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
base-image-debian-rdp-ldap:
|
base-image-debian-rdp-ldap:
|
||||||
image: git.pi-farm.de/pi-farm/base-image-debian-rdp-ldap:bookworm-de
|
image: git.pi-farm.de/pi-farm/base-image-debian-rdp-ldap:bookworm-xfce-de
|
||||||
container_name: base-image-debian-rdp-ldap
|
container_name: base-image-debian-rdp-ldap
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
ports:
|
ports:
|
||||||
@@ -58,7 +58,7 @@ docker compose up -d
|
|||||||
## 🐳 Method 2: Standalone Container (Docker Run / CLI)
|
## 🐳 Method 2: Standalone Container (Docker Run / CLI)
|
||||||
### 🚀 1. Pull the image manually
|
### 🚀 1. Pull the image manually
|
||||||
```bash
|
```bash
|
||||||
docker pull git.pi-farm.de/pi-farm/base-image-debian-rdp-ldap:bookworm-de
|
docker pull git.pi-farm.de/pi-farm/base-image-debian-rdp-ldap:bookworm-xfce-de
|
||||||
```
|
```
|
||||||
### 🚀 2. Run the container directly
|
### 🚀 2. Run the container directly
|
||||||
```bash
|
```bash
|
||||||
@@ -73,15 +73,13 @@ docker run -d \
|
|||||||
-e LDAP_SUDO_GROUP=YOUR-SUDO-USERS-GROUP \
|
-e LDAP_SUDO_GROUP=YOUR-SUDO-USERS-GROUP \
|
||||||
-v ./YOUR-PERSISTENT-FOLDER:/home \
|
-v ./YOUR-PERSISTENT-FOLDER:/home \
|
||||||
-p 3389:3389 \
|
-p 3389:3389 \
|
||||||
git.pi-farm.de/pi-farm/base-image-debian-rdp-ldap:bookworm-de
|
git.pi-farm.de/pi-farm/base-image-debian-rdp-ldap:bookworm-xfce-de
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
*Last updated on: 10.10.2026 00:57*
|
*Last updated on: 10.10.2026 14:31*
|
||||||
|
|
||||||
### 📜 Version History
|
### 📜 Version History
|
||||||
| Version | Date | Status |
|
| Version | Date | Status |
|
||||||
| :--- | :--- | :--- |
|
| :--- | :--- | :--- |
|
||||||
| **bookworm-de** | 10.10.2026 00:57 | ✅ |
|
| **bookworm-xfce-de** | 10.10.2026 14:31 | ✅ |
|
||||||
| **bookworm-de** | 08.10.2026 23:33 | ✅ |
|
|
||||||
| **trixie-de** | 08.10.2026 22:50 | ✅ |
|
|
||||||
+1
-3
@@ -1,3 +1 @@
|
|||||||
| **bookworm-de** | 10.10.2026 00:57 | ✅ |
|
| **bookworm-xfce-de** | 10.10.2026 14:31 | ✅ |
|
||||||
| **bookworm-de** | 08.10.2026 23:33 | ✅ |
|
|
||||||
| **trixie-de** | 08.10.2026 22:50 | ✅ |
|
|
||||||
+1
-1
@@ -4,7 +4,7 @@ BUILD_COUNTRY=de
|
|||||||
|
|
||||||
## BUILD STAGE
|
## BUILD STAGE
|
||||||
BUILD_BASE_IMAGE="debian:${DEBIAN_CODENAME}"
|
BUILD_BASE_IMAGE="debian:${DEBIAN_CODENAME}"
|
||||||
BUILD_TAG="${DEBIAN_CODENAME}-${BUILD_COUNTRY}"
|
BUILD_TAG="${DEBIAN_CODENAME}-xfce-${BUILD_COUNTRY}"
|
||||||
BUILD_TAG_LATEST=n
|
BUILD_TAG_LATEST=n
|
||||||
BUILD_LANG=de_DE.UTF-8
|
BUILD_LANG=de_DE.UTF-8
|
||||||
BUILD_LANGUAGE=de_DE:de
|
BUILD_LANGUAGE=de_DE:de
|
||||||
|
|||||||
+1
-1
@@ -1,6 +1,6 @@
|
|||||||
services:
|
services:
|
||||||
base-image-debian-rdp-ldap:
|
base-image-debian-rdp-ldap:
|
||||||
image: git.pi-farm.de/pi-farm/base-image-debian-rdp-ldap:bookworm-de
|
image: git.pi-farm.de/pi-farm/base-image-debian-rdp-ldap:bookworm-xfce-de
|
||||||
container_name: base-image-debian-rdp-ldap
|
container_name: base-image-debian-rdp-ldap
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
ports:
|
ports:
|
||||||
|
|||||||
Reference in new issue
Block a user