koszewscy/kerberos
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Refactor Dockerfile and README to simplify user permissions and remove unnecessary user setup

Browse Source
This commit is contained in:
Sławek Koszewski
2026-05-16 14:38:12 +02:00
parent a0c6342389
commit f1be45c147
2 changed files with 1 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
-3
View File
@@ -67,9 +67,6 @@ This creates `slawek/admin@REALM` and grants it full kadmin rights via the ACL.
./scripts/run-container.sh
```
Runs as user `krb5`; `CAP_NET_BIND_SERVICE` is granted to the daemon binaries at build time via `setcap`.
The `kerberos_data` volume (`/var/lib/krb5kdc`) holds the realm database, configuration, and keytab. All files are written once on first start. On subsequent starts the container requires no environment variables — the persisted configuration is used as-is. Sensitive variables (`KRB5_MASTER_PASSWORD`, `KRB5_ADMIN_PASSWORD`) can be removed from the env file after the realm is initialised.
## Ports