Skip to content
Snippets Groups Projects
Select Git revision
  • bfa237e3ff92c1ca8040fbc1a1bd90abe6448194
  • master default
2 results

Dockerfile

  • nimrod's avatar
    bfa237e3
    Run slapd as a limited user. · bfa237e3
    nimrod authored 
    - Relax the permission on /etc/ssl to allow generating snakeoil
certificate and key.
- Grant the slapd binary CAP_NET_BIND_SERVICE to allow binding to
privileged ports.
- Change owner of /etc/ldap/ldap.conf to allow modifying it in
entrypoint.
- Prepopulate volumes with the correct ownership, permissions and
directory structure to avoid doing it in the entrypoint without root.
    bfa237e3
    History
    Run slapd as a limited user.
    nimrod authored 
    - Relax the permission on /etc/ssl to allow generating snakeoil
certificate and key.
- Grant the slapd binary CAP_NET_BIND_SERVICE to allow binding to
privileged ports.
- Change owner of /etc/ldap/ldap.conf to allow modifying it in
entrypoint.
- Prepopulate volumes with the correct ownership, permissions and
directory structure to avoid doing it in the entrypoint without root.