mirror of
https://github.com/bitnami/containers.git
synced 2026-03-27 15:27:48 +08:00
openldap: set capabilities on /opt/bitnami/openldap/sbin/slapd binary (#38469)
openldap: set capabilities on /opt/bitnami/openldap/sbin/slapd binary to allow it to listen on privileged ports like 389 (ldap://) or 636 (ldaps://) when using docker network type host Signed-off-by: Thomas König <tom@faircoin.world>
This commit is contained in:
@@ -19,7 +19,7 @@ ENV HOME="/" \
|
||||
COPY prebuildfs /
|
||||
SHELL ["/bin/bash", "-o", "pipefail", "-c"]
|
||||
# Install required system packages and dependencies
|
||||
RUN install_packages ca-certificates curl libargon2-1 libcom-err2 libcrypt1 libgssapi-krb5-2 libk5crypto3 libkeyutils1 libkrb5-3 libkrb5support0 libltdl7 libnsl2 libnss3-tools libodbc1 libperl5.32 libsasl2-2 libssl1.1 libtirpc3 libwrap0 mdbtools procps psmisc
|
||||
RUN install_packages ca-certificates curl libargon2-1 libcap2-bin libcom-err2 libcrypt1 libgssapi-krb5-2 libk5crypto3 libkeyutils1 libkrb5-3 libkrb5support0 libltdl7 libnsl2 libnss3-tools libodbc1 libperl5.32 libsasl2-2 libssl1.1 libtirpc3 libwrap0 mdbtools procps psmisc
|
||||
RUN mkdir -p /tmp/bitnami/pkg/cache/ && cd /tmp/bitnami/pkg/cache/ && \
|
||||
COMPONENTS=( \
|
||||
"openldap-2.6.4-3-linux-${OS_ARCH}-debian-11" \
|
||||
@@ -36,7 +36,7 @@ RUN mkdir -p /tmp/bitnami/pkg/cache/ && cd /tmp/bitnami/pkg/cache/ && \
|
||||
RUN apt-get autoremove --purge -y curl && \
|
||||
apt-get update && apt-get upgrade -y && \
|
||||
apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives
|
||||
RUN chmod g+rwX /opt/bitnami
|
||||
RUN chmod g+rwX /opt/bitnami && setcap 'cap_net_bind_service=+ep' /opt/bitnami/openldap/sbin/slapd
|
||||
|
||||
COPY rootfs /
|
||||
RUN /opt/bitnami/scripts/openldap/postunpack.sh
|
||||
|
||||
Reference in New Issue
Block a user