Warewulf Pro 4.7 Keeps Stateless Nodes Joined to Active Directory
Global – November 10, 2026 -- Warewulf Pro 4.7 keeps stateless compute nodes joined to Active Directory across reboots by moving the join to the Warewulf server, using two overlays shipped in the warewulf-overlays-sssd package. Nodes never run realm join; the join happens once per node on the server.
Two overlays carry the join to every booting node
Warewulf nodes boot from a network-served image, so anything written to the root filesystem at runtime, including a realm join, disappears on reboot. The sssd system overlay configures SSSD and the Kerberos default realm on each node. The krb5.keytab runtime overlay delivers each node's Kerberos keytab from the server.
The node image needs the sssd, sssd-ad, adcli, krb5-workstation and authselect packages, with SSSD selected as the authentication profile. Not every Warewulf node image includes authselect, so it must be installed explicitly.