Implement template for SSSD configuration#331
Open
runleveldev wants to merge 7 commits into
Open
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
This PR updates the base image’s SSSD configuration to be generated from an environment-driven template at boot, and wires up admin-configurable default container environment variables (including new SSSD-related keys) through the server seeders and the settings UI.
Changes:
- Replace the static
sssd.confwith ansssd.conf.templateintended to be rendered at startup via environment variables. - Add a systemd drop-in to render the template into
/etc/sssd/sssd.confbeforesssd.servicestarts, and update the base image Dockerfile accordingly. - Seed new SSSD-related
default_container_env_varsentries and improve the Settings UI layout for editing default env vars.
Reviewed changes
Copilot reviewed 7 out of 7 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| images/base/sssd.conf.template | New SSSD config template using environment variables. |
| images/base/sssd.conf | Removes the previously hard-coded SSSD configuration. |
| images/base/Dockerfile | Copies the template + systemd drop-in and improves rootfs download robustness. |
| images/base/50-sssd-conf-template.conf | systemd drop-in to render sssd.conf from the template at service start. |
| create-a-container/seeders/20260604000000-seed-sssd-env-vars.js | Seeds default env-var keys for populating the SSSD template. |
| create-a-container/seeders/20260311000000-seed-wazuh-env-vars.js | Adjusts description text for the Wazuh registration password env var. |
| create-a-container/client/src/pages/settings/SettingsPage.tsx | Switches default env var editing UI to a table-based layout. |
cmyers-mieweb
approved these changes
Jun 5, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Copilot Summary
This pull request updates the SSSD configuration process in the base image to support environment-based templating, making the configuration more flexible and secure. The static
sssd.confis replaced with a template that is rendered at container startup using environment variables, and the Dockerfile and systemd configuration are updated accordingly.SSSD configuration templating:
sssd.conffile with a newsssd.conf.templatethat uses environment variables for all sensitive or environment-specific settings, such as LDAP URIs, TLS requirements, schema, search bases, and authentication tokens. [1] [2]sssd.conf.template) instead of the static config, and added a systemd drop-in (50-sssd-conf-template.conf) to render the template into the finalsssd.confat service startup usingenvsubst. [1] [2]