Add USE flags for nss-pam-ldapd and sssd

ansible/playbooks/roles/compatibility_layer/defaults/main.yml

@@ -35,6 +35,10 @@ prefix_unmask_packages: |
   # unmask older GCC to make it installable
   =sys-devel/gcc-9*
 prefix_bootstrap_use_flags: |
+  # only build libnss, don't build the daemon (use the one from the host)
+  sys-auth/nss-pam-ldapd -nslcd
+  # don't build the SSSD daemon (and man pages) either
+  sys-auth/sssd -daemon -man
   # make sure that gold linker is installed with binutils
   sys-devel/binutils gold
   # only install Python 3.11
@@ -94,7 +98,7 @@ symlinks_to_host:
   - /etc/hosts
 
   # required to ensure name-service information is taken from the right source (e.g. ldap)
-  - /etc/nsswitch.conf
+  # - /etc/nsswitch.conf
 
   # required to use the DNS resolver from the host (should be done automatically)
   - /etc/resolv.conf
@@ -106,16 +110,16 @@ symlinks_to_host:
   - /lib64/libnss_centrifydc.so.2
 
   # required if LDAP is used in nsswitch.conf
-  - /lib64/libnss_ldap.so.2
+  # - /lib64/libnss_ldap.so.2
 
   # required if SSSD is used in nsswitch.conf
-  - /lib64/libnss_sss.so.2
+  # - /lib64/libnss_sss.so.2
 
   # required to make runtime data available for lots of tools (including who and w)
-  - /var/run
+  # - /var/run
 
   # required by the last command
-  - /var/log/wtmp
+  # - /var/log/wtmp
 
 #  - /var/lib/munge
 #  - /var/lib/unbound

scripts/install-sssd-and-nss-pam-ldapd-EESSI.IO-2023.06_2024-04-15.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+
+set -e
+
+mytmpdir=$(mktemp -d)
+
+if [ -z "$EPREFIX" ]; then
+    # this assumes we're running in a Gentoo Prefix environment
+    EPREFIX=$(dirname $(dirname $SHELL))
+fi
+echo "EPREFIX=${EPREFIX}"
+
+cd ${EPREFIX}/var/db/repos/eessi/
+
+# collect list of installed packages before updating packages
+list_installed_pkgs_pre_update=${mytmpdir}/installed-pkgs-pre-update.txt
+echo "Collecting list of installed packages to ${list_installed_pkgs_pre_update}..."
+qlist -IRv | sort | tee ${list_installed_pkgs_pre_update}
+
+# update checkout of eessi overlay to sufficiently recent commit to include fix from https://github.com/EESSI/gentoo-overlay/pull/99
+# TODO: add URL when the PR is merged
+eessi_commit='d5355267ad6b52d90c65e0c41af726cc0e83afea'
+echo "Updating $EPREFIX/var/db/repos/eessi to recent commit (${eessi_commit})..."
+cd $EPREFIX/var/db/repos/eessi
+time git fetch origin
+echo "Checking out ${eessi_commit} in ${PWD}..."
+time git checkout ${eessi_commit}
+cd -
+
+# reinstall the currently installed version of glibc to apply the changes from https://github.com/EESSI/gentoo-overlay/pull/99
+emerge --verbose =$(qlist -IRv sys-libs/glibc)
+
+# reinstall the packages that provide the who and last commands to make them pick up the modified glibc header files
+# with locations to /var/log/[u,]wtmp
+emerge --verbose =sys-apps/util-linux-2.38.1-r3 # we currently have r2, but that's not available anymore in the current gentoo commit
+emerge --verbose =sys-apps/coreutils-9.3-r3 # we currently have r1, but that's not available anymore in the current gentoo commit
+
+# add the USE flags for packages related to LDAP and SSSD, and install the corresponding packages
+# see: https://github.com/EESSI/compatibility-layer/pull/199
+cat << EOF >> ${EPREFIX}/etc/portage/package.use
+# only build libraries and userspace tools
+net-nds/openldap minimal
+# only build libnss, don't build the daemon (use the one from the host)
+sys-auth/nss-pam-ldapd -nslcd
+# don't build the SSSD daemon (and man pages) either
+sys-auth/sssd -daemon -man
+EOF
+emerge --verbose sys-auth/nss-pam-ldapd::eessi
+emerge --verbose sys-auth/sssd::eessi
+
+# remove the host symlinks that are no longer needed
+# see: https://github.com/EESSI/compatibility-layer/pull/199
+rm ${EPREFIX}/etc/nsswitch.conf
+rm ${EPREFIX}/lib64/libnss_ldap.so.2
+rm ${EPREFIX}/lib64/libnss_sss.so.2
+rm ${EPREFIX}/var/run
+# the following symlink is in our playbook, but it hadn't been added to the production repository yet
+# rm ${EPREFIX}/var/log/wtmp
+
+# collect list of installed packages after updating packages
+list_installed_pkgs_post_update=${mytmpdir}/installed-pkgs-post-update.txt
+echo "Collecting list of installed packages to ${list_installed_pkgs_post_update}..."
+qlist -IRv | sort | tee ${list_installed_pkgs_post_update}
+
+echo
+echo "diff in installed packages:"
+diff -u ${list_installed_pkgs_pre_update} ${list_installed_pkgs_post_update}
+
+rm -rf ${mytmpdir}