We have a development server (vdev4), which hosts LXC containers for individual developers, e.g. vdev-jsmith, all running the same OS, Ubuntu 18.04 LTS.

The host (vdev4) is joined to Active Directory and is running sssd

As we'll be bind mounting some directories from the host into the containers, I need the UID/GID mappings to match between the host and all guest containers.

I saw an article a few months back about installing the sssd client libraries in the guests, then bind mounting the sssd sockets / working directory into the containers, so they access the process running on the host for queries and possibly even authentication.

Now I've come to implement it, I can't find the article anywhere. Does anyone know how to do it, or have a link to the article?


Found it: https://jhrozek.wordpress.com/2015/03/31/authenticating-a-docker-container-against-hosts-unix-accounts/

I'll post a full answer once we confirm it is working.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.