Files
shadow/share/containers/fedora.dockerfile
Iker Pedrosa dbd3527c03 share/containers: update build flags for fedora 40
libpam is enabled to provide `passwd` binary from this package, as there
are several password quality checks that are enabled through a PAM
module. Same reason to disable account-tools-setuid.

sssd is disabled because `files provider` has been removed in sssd, and
the underlying functionality in shadow isn't needed anymore.

libcrack dependency was disabled some time ago, but the upstream repo
wasn't updated. Doing it now.

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alejandro Colomar <alx@kernel.org>
2024-05-02 10:45:03 +02:00

38 lines
811 B
Docker

ARG OS_IMAGE="fedora:latest"
FROM "${OS_IMAGE}" AS build
RUN dnf install -y \
dnf-plugins-core \
libcmocka-devel \
systemd-devel
RUN dnf builddep -y shadow-utils
COPY ./ /usr/local/src/shadow/
WORKDIR /usr/local/src/shadow/
RUN ./autogen.sh \
--disable-account-tools-setuid \
--enable-lastlog \
--enable-logind=no \
--enable-man \
--enable-shadowgrp \
--enable-shared \
--with-audit \
--with-bcrypt \
--with-group-name-max-length=32 \
--with-libpam \
--with-selinux \
--with-sha-crypt \
--with-yescrypt \
--without-libbsd \
--without-libcrack \
--without-sssd
RUN make -Orecurse -j4
RUN bash -c "trap 'cat <tests/unit/test-suite.log >&2' ERR; make check;"
RUN make install
FROM scratch AS export
COPY --from=build /usr/local/src/shadow/config.log \
/usr/local/src/shadow/config.h ./