Documents and scripts to reproduce the IPA integration on the Pi
(raspberrypi.tail13f623.ts.net, Debian 12 bookworm):
- setup-ipa-sudo.sh: writes /etc/sudoers.d/ipa-admins granting
%admins NOPASSWD:ALL (same IPA admins group as pbs/pdm/pve1)
- setup-docker-ipa-gid.sh: pins local docker group GID to 50010
via groupmod --non-unique so IPA docker-access group membership
alone grants docker socket access (mirrors NixOS lib.mkForce approach)
- README.md + CLAUDE.md: quick-start, current status, guardrails
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
