diff --git a/Dockerfile b/Dockerfile index 763ffef2d2eee678ff5c18d49c0bff290c1871c6..f1b4903a9db76a163e7529ef16675ed757c5780d 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,15 @@ FROM pytorch/pytorch:1.9.0-cuda10.2-cudnn7-runtime +RUN apt-get -qq update && \ + apt-get -yqq install libpam-krb5 krb5-user && \ + apt-get -yqq clean && \ + apt-get install -y --no-install-recommends \ + ca-certificates bash-completion tar less \ + python-pip python-setuptools build-essential python-dev \ + python3-pip python3-wheel && \ + rm -rf /var/lib/apt/lists/* + + RUN mkdir -p /opt/regressor && \ mkdir -p /opt/regressor/src/models \ && pip install h5py @@ -8,6 +18,8 @@ WORKDIR /opt/regressor/src ADD regressor.py /opt/regressor/src/regressor.py ADD dryReg.py /opt/regressor/src/dryReg.py COPY ./models/* /opt/regressor/src/models/ +COPY docker/krb5.conf /etc/krb5.conf + RUN chgrp -R 0 /opt/regressor \ && chmod -R g+rwX /opt/regressor diff --git a/docker/krb5.conf b/docker/krb5.conf new file mode 100644 index 0000000000000000000000000000000000000000..f1dc2680abf70ab19185ba3d28786d2f6081243b --- /dev/null +++ b/docker/krb5.conf @@ -0,0 +1,89 @@ +; AD : This Kerberos configuration is for CERN's Active Directory realm. +; +; /etc/krb5.conf + +[libdefaults] + default_realm = CERN.CH + ticket_lifetime = 25h + renew_lifetime = 120h + forwardable = true + proxiable = true + default_tkt_enctypes = arcfour-hmac-md5 aes256-cts aes128-cts des3-cbc-sha1 des-cbc-md5 des-cbc-crc + chpw_prompt = true + rdns = false + +[appdefaults] +pam = { + external = true + krb4_convert = false + krb4_convert_524 = false + krb4_use_as_req = false +} + +[domain_realm] +.cern.ch = CERN.CH +.fnal.gov = FNAL.GOV +.hep.man.ac.uk = HEP.MAN.AC.UK +.in2p3.fr = IN2P3.FR +# No default domain for KFKI.HU specified. + +[realms] +# Start of puppet output for CERN.CH + CERN.CH = { + default_domain = cern.ch + kpasswd_server = cerndc.cern.ch + admin_server = cerndc.cern.ch + kdc = cerndc.cern.ch + v4_name_convert = { + host = { + rcmd = host + } + } + } + + +# Start of puppet output for FNAL.GOV + FNAL.GOV = { + default_domain = fnal.gov + admin_server = krb-fnal-admin.fnal.gov + kdc = krb-fnal-fcc3.fnal.gov:88 + kdc = krb-fnal-2.fnal.gov:88 + kdc = krb-fnal-3.fnal.gov:88 + kdc = krb-fnal-1.fnal.gov:88 + kdc = krb-fnal-4.fnal.gov:88 + kdc = krb-fnal-enstore.fnal.gov:88 + kdc = krb-fnal-fg2.fnal.gov:88 + kdc = krb-fnal-cms188.fnal.gov:88 + kdc = krb-fnal-cms204.fnal.gov:88 + kdc = krb-fnal-d0online.fnal.gov:88 + } + + +# Start of puppet output for HEP.MAN.AC.UK + HEP.MAN.AC.UK = { + default_domain = hep.man.ac.uk + kpasswd_server = afs4.hep.man.ac.uk + admin_server = afs4.hep.man.ac.uk + kdc = afs1.hep.man.ac.uk + kdc = afs2.hep.man.ac.uk + kdc = afs3.hep.man.ac.uk + kdc = afs4.hep.man.ac.uk + } + + +# Start of puppet output for IN2P3.FR + IN2P3.FR = { + default_domain = in2p3.fr + kpasswd_server = kerberos-admin.in2p3.fr + admin_server = kerberos-admin.in2p3.fr + kdc = kerberos-1.in2p3.fr + kdc = kerberos-2.in2p3.fr + kdc = kerberos-3.in2p3.fr + } + + +# Start of puppet output for KFKI.HU + KFKI.HU = { + admin_server = kerberos.kfki.hu + kdc = kerberos.kfki.hu + }