FreeIPA

Installation on Docker

• docker pull freeipa/freeipa-server:centos-9-stream-4.13.0

• Initial Run

docker run -it \
  --name freeipa-server \
  -h ipa.example.test \
  -v /sys/fs/cgroup:/sys/fs/cgroup:ro \
  -v /var/lib/ipa-data:/data:Z \
  -p 80:80 \
  -p 443:443 \
  -p 389:389 \
  -p 636:636 \
  -p 88:88 \
  -p 464:464 \
  freeipa/freeipa-server:centos-9-stream-4.13.0

• inside container, run this

ipa-server-install --unattended \
  --realm=EXAMPLE.TEST \
  --domain=example.test \
  --ds-password=Secret123 \
  --admin-password=Secret123 \
  --no-ntp --no-dns

• Or add this to the end of docker run, all parameters will be passed to ipa-server-install command

docker run -it \
  --name freeipa-server \
  -h ipa.example.test \
  -v /sys/fs/cgroup:/sys/fs/cgroup:ro \
  -v /var/lib/ipa-data:/data:Z \
  -p 80:80 \
  -p 443:443 \
  -p 389:389 \
  -p 636:636 \
  -p 88:88 \
  -p 464:464 \
  freeipa/freeipa-server:centos-9-stream-4.13.0 \
  --realm=HOME.TUAN.AU \
  --domain=home.tuan.au \
  --ds-password=TmOFRgtky3UNJf \
  --admin-password=Wi13nXaVOCznVS \
  --no-ntp

• Verify

kinit admin
ipa user-add testuser --first=Test --last=User
ipa user-show testuser

• Remove

ipa-server-install --uninstall -U
systemctl stop [email protected]
rm -rf /etc/pki/pki-tomcat
rm -rf /var/lib/pki/pki-tomcat
rm -rf /root/.dogtag

Reference

• FreeIPA Docker Container