标签：gitlab name GitLab server freeipa FreeIPA Docker data docker
一. Docker 部署 FreeIPA 服务
- 为省去 FreeIPA服务器环境安装复杂性, 采取Docker容器安装最为方便
- FreeIPA是集中认证和权限管理服务器系统, 包含WEB UI管理页面, 页面访问地址需要全域访问(即不能通过IP地址直接访问页面), 需要将地址与IP在 /etc/hosts 里面映射
安装 FreeIPA 服务器
首先 docker 拉取 FreeIPA 的镜像
docker pull freeipa/freeipa-server:centos-7
然后在宿主机上创建 FreeIPA 数据目录
mkdir /var/lib/ipa-data
再启动 docker 容器
docker run --name freeipa -it -p 80:80 -p 389:389 -p 443:443 \
-h freeipa.server.com \
–sysctl net.ipv6.conf.all.disable_ipv6=0 \
-v /sys/fs/cgroup:/sys/fs/cgroup:ro \
-v /opt/ipa-data:/data:Z \
freeipa/freeipa-server:centos-7 \
–no-ntp
部署过程
This program will set up the FreeIPA Server.
This includes:
Configure a stand-alone CA (dogtag) for certificate management
Create and configure an instance of Directory Server
Create and configure a Kerberos Key Distribution Center (KDC)
Configure Apache (httpd)
Excluded by options:
Configure the Network Time Daemon (ntpd)
To accept the default shown in brackets, press the Enter key.
Do you want to configure integrated DNS (BIND)? [no]: no
Enter the fully qualified domain name of the computer
on which you’re setting up server software. Using the form
.
Example: master.example.com.
Server host name [freeipa.server.com]:freeipa.server.com
The domain name has been determined based on the host name.
Please confirm the domain name [server.com]: freeipa.server.com
The kerberos protocol requires a Realm name to be defined.
This is typically the domain name converted to uppercase.
Please provide a realm name [FREEIPA.SERVER.COM]: FREEIPA.SERVER.COM
An upper-case realm name is required.
Do you want to use FREEIPATEST.GENERALICHINA.COM as realm name? [yes]: yes
Certain directory server operations require an administrative user.
This user is referred to as the Directory Manager and has full access
to the Directory for system management tasks and will be added to the
instance of directory server created for IPA.
The password must be at least 8 characters long.
Directory Manager password:*********
Password (confirm)
标签：gitlab,name,GitLab,server,freeipa,FreeIPA,Docker,data,docker 来源： https://blog.csdn.net/qq271003351/article/details/118898132
本站声明： 1. iCode9 技术分享网（下文简称本站）提供的所有内容，仅供技术学习、探讨和分享； 2. 关于本站的所有留言、评论、转载及引用，纯属内容发起人的个人观点，与本站观点和立场无关； 3. 关于本站的所有言论和文字，纯属内容发起人的个人观点，与本站观点和立场无关； 4. 本站文章均是网友提供，不完全保证技术分享内容的完整性、准确性、时效性、风险性和版权归属；如您发现该文章侵犯了您的权益，可联系我们第一时间进行删除； 5. 本站为非盈利性的个人网站，所有内容不会用来进行牟利，也不会利用任何形式的广告来间接获益，纯粹是为了广大技术爱好者提供技术内容和技术思想的分享性交流网站。