How to use a custom-built PAM module for signin?

Longtime lurker, first time posting. :slight_smile:

Could someone point me in the direction on how I would add my own PAM modules to an Aurora/Universal Blue installation?

Looks like I may need to modify at the least:

  • /etc/pam.d/
  • /lib/

Is there a layered approach I can take, or do I need to go the route of a full-blown custom image setup and pipelines/fork?

Thank you!

/etc is editable, but /lib is not (I don’t think). So you may need a full custom image, but it’s not that hard to do.

Have you tried packaging it into an RPM and layering it in?

Nope. Just exploring options before I go down this road to see how it works with the universal blue setup.