lejeczek via FreeIPA-users wrote:
> Hi guys.
>
> ipa-replica-install fails early -in container on centos 10 - yet first
> server install succeeds.
> Before I spam here with logs & such I thought I show this:
>
> -> $ { export _DOM=mine.priv _H=ipa-dzien _IP=10.2.1.202;
> _NAME="freeipa.${_DOM}".c9s; export
> _PATH=/devs/ROOTFUL.containers/${_NAME}; echo; mkdir -p
> ${_PATH}/{,root,data}; }; podman run -ti --tz=local
> --cap-add=CAP_SYS_TIME --add-host=${_H}.${_DOM}:${_IP}
> --network=off-host-1021 --ip=${_IP} --volume=${_PATH}/root:/root
> --volume=${_PATH}/data:/data:z
> --volume=${_PATH}/etc_resolv.conf:/etc/resolv.conf
> --volume=${_PATH}/etc_hosts:/etc/hosts --hostname ${_H}.${_DOM} --name
> ${_NAME} localhost/freeipa-server-c9s ipa-replica-install --setup-dns
> --no-forwarders --no-ntp --force-join
>
> Failed to set RLIMIT_CORE: Operation not permitted
> systemd 252-59.el9 running in system mode (+PAM +AUDIT +SELINUX
> -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT +GNUTLS +OPENSSL +ACL +BLKID
> +CURL +ELFUTILS +FIDO2 +IDN2 -IDN -IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK
> +PCRE2 -PWQUALITY +P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD
> -BPF_FRAMEWORK +XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified)
> Detected virtualization container-other.
> Detected architecture x86-64.
> Initializing machine ID from container UUID.
> Queued start job for default target Minimal target for containerized
> FreeIPA server.
> Wed Mar 11 17:34:40 CET 2026 /usr/sbin/ipa-server-configure-first
> Configuring client side components
> This program will set up IPA client.
> Version 4.13.1
>
> One of password / principal / keytab is required.
> The ipa-client-install command failed. See
> /var/log/ipaclient-install.log for more information
> Removing client side components
> IPA client is not configured on this system.
> The ipa-client-install command failed.
>
> Your system may be partly configured.
> Run /usr/sbin/ipa-server-install --uninstall to clean up.
>
> Configuration of client side components failed!
> The ipa-replica-install command failed. See
> /var/log/ipareplica-install.log for more information
> Sending SIGTERM to remaining processes...
> Sending SIGKILL to remaining processes...
> All filesystems, swaps, loop devices, MD devices and DM devices detached.
> Exiting container.
>
> Is: Failed to set RLIMIT_CORE: Operation not permitted
> the culprit and if so then what might be a fix?
> My sudo conf already has _Set disable_coredump false_ which I read was
> the workaround previously
>
> many thanks, L.
>
Check the freeipa-container upstream. I seem to recall that a C10S
change was recently merged due to some failure. I don't recall any details.
rob
--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
