Skip to content

Instantly share code, notes, and snippets.

@yaleman
Created June 29, 2022 04:36
Show Gist options
  • Save yaleman/fee9bdcee02a3d97fb5fe389bde11d8c to your computer and use it in GitHub Desktop.
Save yaleman/fee9bdcee02a3d97fb5fe389bde11d8c to your computer and use it in GitHub Desktop.
running a kanidm container

from outside the container:

./insecure_generate_tls.sh
docker run --rm -it -p8443:8443 \
	-v /tmp/kanidm/:/tmp/kanidm/ \
	ghcr.io/kanidm/kanidmd:devel bash

from inside the container

cat > /server-open.toml <<- 'EOF'
bindaddress = "0.0.0.0:8443"
ldapbindaddress = "0.0.0.0:3636"

db_fs_type = "zfs"
db_path = "/tmp/kanidm/kanidm.db"
tls_chain = "/tmp/kanidm/chain.pem"
tls_key = "/tmp/kanidm/key.pem"

# log_level = "perfbasic"
# log_level = "quiet"
log_level = "verbose"

domain = "idm.example.com"
origin = "https://idm.example.com:8443"
EOF

kanidmd recover_account -n idm_admin -c /server-open.toml | grep Success
kanidmd recover_account -n admin -c /server-open.toml | grep Success


kanidmd server -c /server-open.toml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment