Bug 1674545

Summary: [RFE] Support read-only and runtime-only directories for connection profiles (keyfile)
Product: Red Hat Enterprise Linux 8 Reporter: Thomas Haller <thaller>
Component: NetworkManagerAssignee: Thomas Haller <thaller>
Status: CLOSED ERRATA QA Contact: Desktop QE <desktop-qa-list>
Severity: medium Docs Contact:
Priority: medium    
Version: 8.0CC: atragler, bgalvani, fgiudici, fpokryvk, lrintel, rkhan, sukulkar, thaller, vbenes, wchadwic
Target Milestone: rc   
Target Release: 8.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: NetworkManager-1.20.0-4.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-11-05 22:29:15 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1689408, 1701002    

Description Thomas Haller 2019-02-11 15:36:33 UTC 
Currently, keyfiles are in /etc/NetworkManager/system-connections (and some limited support is for runtime connections in /run/NetworkManager/system-connections for initrd-generator).

This needs improvement.

A more elaborate description here: 

  https://bugzilla.gnome.org/show_bug.cgi?id=772414

This is important, if you want to pre-deploy profiles. For example, a company might provide RPMs with VPN setups for their company notebooks. Such configuraion files should not end up in /etc. On the other hand, we might have more generators like initrd-generator. These may want to put profiles in /run.


A WIP branch is at th/settings-delegate-storage.
Comment 4 Thomas Haller 2019-07-10 17:26:35 UTC 
Branch on review here: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/merge_requests/189
Comment 5 Thomas Haller 2019-07-17 11:24:30 UTC 
this got now fixed upstream by commit [1]. See also the merge request [2].

As this is a large rework, expect some fall out and there will be follow-up fixes necessary...


[1] https://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d35d3c468a304c3e0e78b4b068d105b1d753876c

[2] https://gitlab.freedesktop.org/NetworkManager/NetworkManager/merge_requests/189
Comment 8 errata-xmlrpc 2019-11-05 22:29:15 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:3623