Document systemd override for custodia.ipa

Signed-off-by: Christian Heimes <[email protected]>

README

@@ -210,6 +210,21 @@ Create ``/etc/custodia/ipa.conf``
     handler = Secrets
     store = cert
 
+Create ``/etc/systemd/system/[email protected]/override.conf``
+
+On Fedora 26 and newer, the Custodia service file defaults to Python 3.
+Although FreeIPA 4.5 has support for Python 3, it's not stable yet.
+Therefore it is necessary to run the ``custodia.ipa`` plugins with
+Python 2.7. You can either use ``systemctl edit [email protected]``
+to create an override or copy the file manually. Don't forget to run
+``systemctl daemon-reload`` in the latter case.
+
+::
+
+    [Service]
+    ExecStart=
+    ExecStart=/usr/sbin/custodia-2 --instance=%i /etc/custodia/%i.conf
+
 Run Custodia server
 
 ::

README.md

@@ -197,6 +197,21 @@ handler = Secrets
 store = cert
 ```
 
+Create ``/etc/systemd/system/[email protected]/override.conf``
+
+On Fedora 26 and newer, the Custodia service file defaults to Python 3.
+Although FreeIPA 4.5 has support for Python 3, it's not stable yet. Therefore
+it is necessary to run the ``custodia.ipa`` plugins with Python 2.7. You
+can either use ``systemctl edit [email protected]`` to create an override
+or copy the file manually. Don't forget to run ``systemctl daemon-reload`` in
+the latter case.
+
+```
+[Service]
+ExecStart=
+ExecStart=/usr/sbin/custodia-2 --instance=%i /etc/custodia/%i.conf
+```
+
 Run Custodia server
 
 ```