openSUSE
Run the official Pomerium binary or container near applications and services in openSUSE environments.
Overview
openSUSE is a Linux project that publishes openSUSE Leap and openSUSE Tumbleweed. Leap uses a fixed-release model. Tumbleweed is a rolling-release distribution.
Private openSUSE applications can use one identity-aware access point without a separate external sign-in implementation in each service.
openSUSE supplies the runtime or deployment environment. Pomerium runs in that environment and supplies the identity-aware access point for selected services.
Prerequisites
- A supported Linux host that can accept the user-facing route and reach the private upstream service.
- DNS, TLS, identity-provider configuration, protected secrets, and durable storage where the selected design requires it.
How it works
Run Pomerium Core on a supported Linux host in the environment. Install the official package, standalone binary, or container. Configure DNS, TLS, identity, route policy, storage, and replicas for the selected design.
Use the official standalone Pomerium Linux binary or official container. Define process supervision, DNS, TLS, identity, route policy, secrets, and updates. Use the standalone binary or container instructions for this distribution.
Check service health, DNS, TLS, required storage and replicas, and upstream reachability. Confirm that a direct public route cannot bypass Pomerium.
Example
An internal inventory application runs on openSUSE Leap. Pomerium runs on a connected host from the official Linux binary and forwards approved requests.
Considerations
- Pomerium does not provide a first-party Zypper package workflow.
