libpam is enabled to provide `passwd` binary from this package, as there are several password quality checks that are enabled through a PAM module. Same reason to disable account-tools-setuid. sssd is disabled because `files provider` has been removed in sssd, and the underlying functionality in shadow isn't needed anymore. libcrack dependency was disabled some time ago, but the upstream repo wasn't updated. Doing it now. Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com> Reviewed-by: Alejandro Colomar <alx@kernel.org>
38 lines
811 B
Docker
38 lines
811 B
Docker
ARG OS_IMAGE="fedora:latest"
|
|
|
|
FROM "${OS_IMAGE}" AS build
|
|
|
|
RUN dnf install -y \
|
|
dnf-plugins-core \
|
|
libcmocka-devel \
|
|
systemd-devel
|
|
RUN dnf builddep -y shadow-utils
|
|
|
|
COPY ./ /usr/local/src/shadow/
|
|
WORKDIR /usr/local/src/shadow/
|
|
|
|
RUN ./autogen.sh \
|
|
--disable-account-tools-setuid \
|
|
--enable-lastlog \
|
|
--enable-logind=no \
|
|
--enable-man \
|
|
--enable-shadowgrp \
|
|
--enable-shared \
|
|
--with-audit \
|
|
--with-bcrypt \
|
|
--with-group-name-max-length=32 \
|
|
--with-libpam \
|
|
--with-selinux \
|
|
--with-sha-crypt \
|
|
--with-yescrypt \
|
|
--without-libbsd \
|
|
--without-libcrack \
|
|
--without-sssd
|
|
RUN make -Orecurse -j4
|
|
RUN bash -c "trap 'cat <tests/unit/test-suite.log >&2' ERR; make check;"
|
|
RUN make install
|
|
|
|
FROM scratch AS export
|
|
COPY --from=build /usr/local/src/shadow/config.log \
|
|
/usr/local/src/shadow/config.h ./
|