Re: [atomic-devel] RFE: please add ipa-client to base atomic image

[Colin Walters <walters verbum org>]

OK, so conceptually there's two chunks here; freeipa-client depends on sssd, which
isn't in current Fedora rawhide Atomic.  Let's fix that first:

diff --git a/fedora-atomic-docker-host.json b/fedora-atomic-docker-host.json
index 1ad753f..f40a4cd 100644
--- a/fedora-atomic-docker-host.json
+++ b/fedora-atomic-docker-host.json
@@ -38,6 +38,8 @@
 		 "tar",
 		 "cloud-init",
 		 "cloud-utils-growpart",
+		 "sssd",
 		 "docker-storage-setup",
 		 "rsync",
 		 "man-db",

Results in:

# rpm-ostree db --repo=repo diff fedora-atomic/rawhide/x86_64/docker-host{^,}
Added:
 bind-libs-32:9.9.6-4.fc22.x86_64
 bind-utils-32:9.9.6-4.fc22.x86_64
 c-ares-1.10.0-4.fc22.x86_64
 cups-libs-1:2.0.1-1.fc22.x86_64
 cyrus-sasl-gssapi-2.1.26-19.fc22.x86_64
 libdhash-0.4.3-24.fc22.x86_64
 libipa_hbac-1.12.2-4.fc22.x86_64
 libldb-1.1.17-4.fc22.x86_64
 libsmbclient-2:4.2.0-0.2.rc2.fc22.x86_64
 libsss_idmap-1.12.2-4.fc22.x86_64
 libsss_nss_idmap-1.12.2-4.fc22.x86_64
 libtdb-1.3.1-1.fc22.x86_64
 libwbclient-2:4.2.0-0.2.rc2.fc22.x86_64
 pytalloc-2.1.1-3.fc22.x86_64
 python-sssdconfig-1.12.2-4.fc22.noarch
 samba-2:4.2.0-0.2.rc2.fc22.x86_64
 samba-common-2:4.2.0-0.2.rc2.fc22.x86_64
 samba-libs-2:4.2.0-0.2.rc2.fc22.x86_64
 sssd-1.12.2-4.fc22.x86_64
 sssd-ad-1.12.2-4.fc22.x86_64
 sssd-client-1.12.2-4.fc22.x86_64
 sssd-common-1.12.2-4.fc22.x86_64
 sssd-common-pac-1.12.2-4.fc22.x86_64
 sssd-ipa-1.12.2-4.fc22.x86_64
 sssd-krb5-1.12.2-4.fc22.x86_64
 sssd-krb5-common-1.12.2-4.fc22.x86_64
 sssd-ldap-1.12.2-4.fc22.x86_64
 sssd-proxy-1.12.2-4.fc22.x86_64
 systemd-compat-libs-217-4.fc22.x86_64

=/   Why is sssd depending on the samba *server* in rawhide?

Well, next step is freeipa-client on top of that:

--- a/fedora-atomic-docker-host.json
+++ b/fedora-atomic-docker-host.json

@@ -38,6 +38,8 @@
 		 "cloud-init",
 		 "cloud-utils-growpart",
		 "sssd",
+		 "freeipa-client",
 		 "docker-storage-setup",
 		 "rsync",
 		 "man-db",

# rpm-ostree db --repo=repo diff fedora-atomic/rawhide/x86_64/docker-host{^,}
Added:
 autofs-1:5.1.0-9.fc22.x86_64
 autogen-libopts-5.18.4-1.fc22.x86_64
 certmonger-0.76.8-1.fc22.x86_64
 freeipa-client-4.1.2-1.fc22.x86_64
 freeipa-python-4.1.2-1.fc22.x86_64
 gnupg-1.4.18-4.fc22.x86_64
 hesiod-3.2.1-4.fc22.x86_64
 krb5-workstation-1.13-2.fc22.x86_64
 libipa_hbac-python-1.12.2-4.fc22.x86_64
 libtomcrypt-1.17-24.fc22.x86_64
 libtommath-0.42.0-5.fc22.x86_64
 libusb-1:0.1.5-5.fc22.x86_64
 libusbx-1.0.19-2.fc22.x86_64
 libxslt-1.1.28-8.fc22.x86_64
 ntp-4.2.6p5-24.fc22.x86_64
 ntpdate-4.2.6p5-24.fc22.x86_64
 oddjob-0.33-3.fc22.x86_64
 oddjob-mkhomedir-0.33-3.fc22.x86_64
 pam_krb5-2.4.9-3.fc22.x86_64
 psmisc-22.21-5.fc22.x86_64
 pyOpenSSL-0.13.1-4.fc22.x86_64
 python-crypto-2.6.1-6.fc22.x86_64
 python-cssselect-0.9.1-5.fc22.noarch
 python-dateutil-1:1.5-0.fc22.noarch
 python-dns-1.11.1-4.fc21.noarch
 python-kerberos-1.1-16.fc22.x86_64
 python-krbV-1.0.90-9.fc22.x86_64
 python-ldap-2.4.17-1.fc22.x86_64
 python-lxml-3.3.6-1.fc22.x86_64
 python-netaddr-0.7.12-1.fc22.noarch
 python-nss-0.16.0-0.fc22.x86_64
 python-pyasn1-0.1.7-4.fc21.noarch
 python-pyasn1-modules-0.1.7-4.fc21.noarch
 python-qrcode-core-5.0.1-2.fc22.noarch
 python-yubico-1.2.1-3.fc21.noarch
 pyusb-1.0.0-0.10.b1.fc21.noarch
 wget-1.16-3.fc22.x86_64
 xmlrpc-c-1.32.5-1906.svn2451.fc22.x86_64
 xmlrpc-c-client-1.32.5-1906.svn2451.fc22.x86_64


That's...quite a bit of stuff.  Another whole rat's nest of python libraries, including pyOpenSSL/python-crypto =(  As well as another crypto library from libtomcrypt... I'd hoped to kill wget in favor of curl, will investigate that.
Though arguably gnupg should be in there to start with.