Displaying 3 results from an estimated 3 matches for "update_system_ca_store".
2020 May 04
7
[PATCH 0/4] sysprep: add FreeIPA offline unenrollment (RHBZ#1789592)
...adds a new virt-sysprep operation to offline unenroll
a guest from FreeIPA. It does so by removing some configuration files
and certificates.
It requires a change in libguestfs-common before the series is applied.
Pino Toscano (4):
customize: port do_run to run_in_guest_command
sysprep: add a update_system_ca_store side effect
sysprep: ca-certificates: request system CA store update
sysprep: add FreeIPA offline unenrollment (RHBZ#1789592)
customize/customize_run.ml | 48 ++------------
sysprep/Makefile.am | 1 +
sysprep/main.ml...
2020 May 04
0
[PATCH 4/4] sysprep: add FreeIPA offline unenrollment (RHBZ#1789592)
...ki/ca-trust/source/anchors/ipa-ca.crt";
+ "/usr/local/share/ca-certificates/ipa-ca.crt";
+ "/etc/pki/ca-trust/source/ipa.p11-kit" ] in
+ List.iter (
+ fun filename ->
+ try
+ g#rm filename;
+ side_effects#update_system_ca_store ()
+ with
+ G.Error _ -> ()
+ ) certs
+ )
+
+let op = {
+ defaults with
+ name = "unenroll-freeipa";
+ enabled_by_default = true;
+ heading = s_"Offline unenroll the guest from FreeIPA";
+ pod_description = Some (s_"\
+Unenroll the guest...
2020 May 07
3
[PATCH v2 0/2] add FreeIPA offline unenrollment (RHBZ#1789592)
This patch series adds a new virt-sysprep operation to offline unenroll
a guest from FreeIPA. It does so by removing some configuration files
and certificates.
Changes from v1:
- the other patches were pushed, as unrelated and approved
- created a new kerberos-hostkeytab operation
Pino Toscano (2):
sysprep: add IPA offline unenrollment (RHBZ#1789592)
sysprep: add Kerberos keytab file removal