search for: update_system_ca_stor

...adds a new virt-sysprep operation to offline unenroll a guest from FreeIPA. It does so by removing some configuration files and certificates. It requires a change in libguestfs-common before the series is applied. Pino Toscano (4): customize: port do_run to run_in_guest_command sysprep: add a update_system_ca_store side effect sysprep: ca-certificates: request system CA store update sysprep: add FreeIPA offline unenrollment (RHBZ#1789592) customize/customize_run.ml | 48 ++------------ sysprep/Makefile.am | 1 + sysprep/main.ml...

...ki/ca-trust/source/anchors/ipa-ca.crt"; + "/usr/local/share/ca-certificates/ipa-ca.crt"; + "/etc/pki/ca-trust/source/ipa.p11-kit" ] in + List.iter ( + fun filename -> + try + g#rm filename; + side_effects#update_system_ca_store () + with + G.Error _ -> () + ) certs + ) + +let op = { + defaults with + name = "unenroll-freeipa"; + enabled_by_default = true; + heading = s_"Offline unenroll the guest from FreeIPA"; + pod_description = Some (s_"\ +Unenroll the guest...

This patch series adds a new virt-sysprep operation to offline unenroll a guest from FreeIPA. It does so by removing some configuration files and certificates. Changes from v1: - the other patches were pushed, as unrelated and approved - created a new kerberos-hostkeytab operation Pino Toscano (2): sysprep: add IPA offline unenrollment (RHBZ#1789592) sysprep: add Kerberos keytab file removal