telefonicaid / fiware-keystone-spassword

Keystone SPASSWORD is an OpenStack Keystone extension that enables some extra security checks over user passwords, as force the usage of strong passwords, expiration time for a password, number of bad login attempts before user account became temporarily blocked, a recover procedure password, second factor authentication (2FA), etc.
Apache License 2.0
3 stars 1 forks source link

use python3 in docker (and upgrade to docker debian based) #207

Closed AlvaroVega closed 3 months ago

AlvaroVega commented 2 years ago

Keystone stein is able to run with python3 Current docker of keystone-spassword is based on centos7 whtich uses python2.7. https://centos.pkgs.org/7/centos-updates-x86_64/python-2.7.5-90.el7.x86_64.rpm.html

There are some approaches (from less to more difficult):

Keep into acount that keystone is available in some distros (there are rpms for redhat7/redhat8) but not for others.

rdo repository for rpm based distros: https://repos.fedorapeople.org/openstack/

fgalan commented 2 years ago

CentOS 8 has reached end of support. Other alternatives (Debian, alpine, etc.) should be explored... in line with the overall effort of upgrades platforms components.

AlvaroVega commented 2 years ago

Upgrade to use current docker but installing python3: -> Current openstack-keystone.rpm depends on python2-keystone.rpm which depends on python2

AlvaroVega commented 2 years ago

Create a new docker based in debian/ubuntu/alpine There is a buster debian package https://packages.debian.org/buster/keystone based on keystone 14 (rocky) which uses python3

AlvaroVega commented 3 months ago

Done in https://github.com/telefonicaid/fiware-keystone-spassword/pull/238