Closed CEbbinghaus closed 1 year ago
While trying to learn more about what could be causing this problem and exactly what is happening I stumbled upon this SF post that goes over steps to get cgroups/systemd working within containers. I won't be able to test it out tonight but I might have a look tomorrow. Any idea if its helpful for this particular problem?
So I know quite a little about Slackware in the past 20 or so years but googling around suggests it does not use systemd. Does Unraid use systemd? Without systemd in the host, I'd assume any attempts to run a systemd-based container would be futile.
I presume that if this is the case its entirely impossible to run freeIPA in an unraid docker container?
Following said guide led me to modifying the command slightly. namely the inclusion of --sysctl net.ipv6.conf.all.disable_ipv6=0
and changing the image used to freeipa/freeipa-server:centos-8-4.8.7
. This has got it past the systemd & cgroup problem and its now printing this:
Config file with no local change updated from rpm: '/data-template/etc/httpd/conf/httpd.conf' -> '/data/etc/httpd/conf/httpd.conf'
Config file with no local change updated from rpm: '/data-template/etc/httpd/conf/magic' -> '/data/etc/httpd/conf/magic'
Config file with no local change updated from rpm: '/data-template/etc/httpd/conf.d/autoindex.conf' -> '/data/etc/httpd/conf.d/autoindex.conf'
Config file with no local change updated from rpm: '/data-template/etc/httpd/conf.d/welcome.conf' -> '/data/etc/httpd/conf.d/welcome.conf'
Config file with no local change updated from rpm: '/data-template/etc/krb5.conf' -> '/data/etc/krb5.conf'
Config file with no local change updated from rpm: '/data-template/etc/named.conf' -> '/data/etc/named.conf'
Config file with no local change updated from rpm: '/data-template/etc/openldap/schema/samba.schema' -> '/data/etc/openldap/schema/samba.schema'
Config file with no local change updated from rpm: '/data-template/etc/pam.d/login' -> '/data/etc/pam.d/login'
Config file with no local change updated from rpm: '/data-template/etc/pam.d/systemd-user' -> '/data/etc/pam.d/systemd-user'
Config file with no local change updated from rpm: '/data-template/etc/samba/smb.conf' -> '/data/etc/samba/smb.conf'
Non-config file updated from rpm: '/data-template/etc/samba/smb.conf.example' -> '/data/etc/samba/smb.conf.example'
Config file with no local change updated from rpm: '/data-template/etc/sysconfig/autofs' -> '/data/etc/sysconfig/autofs'
Config file with no local change updated from rpm: '/data-template/etc/sysconfig/chronyd' -> '/data/etc/sysconfig/chronyd'
Config file with no local change updated from rpm: '/data-template/var/kerberos/krb5kdc/kdc.conf' -> '/data/var/kerberos/krb5kdc/kdc.conf'
FreeIPA server is already configured but with different version, volume update.
Right, my understanding is you need systemd on the host to be able to run systemd in the container, especially with cgroups v2.
You might want to ask on that Reddit thread to see what host they were actually using, and with what setup.
It did not get you past the systemd problem -- I assume you did not clear the data volume between the runs, so you effectively try to upgrade from AlmaLinux 9 to CentOS 8 which is not something that would be remotely supported. All the messages that you show are from the init-data
phase, before systemd is actually being started.
Realized that so I went and deleted all the configs. reset everything and upgraded the image to use freeipa/freeipa-server:centos-7-4.6.8
. With that I was able to properly start the container in earnest and after running ipa-server-install
it failed with the following:
ipapython.admintool: ERROR Installation aborted
ipapython.admintool: ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
ofc I checked the file and this is the fully generated log
2022-12-15T13:43:31Z DEBUG Logging to /var/log/ipaserver-install.log
2022-12-15T13:43:31Z DEBUG ipa-server-install was invoked with arguments [] and options: {'no_dns_sshfp': False, 'ignore_topology_disconnect': False, 'verbose': False, 'domain_level': None, 'ip_addresses': None, 'secondary_rid_base': None, 'netbios_name': None, 'mkhomedir': False, 'http_cert_files': None, 'zonemgr': None, 'no_pkinit': False, 'reverse_zones': None, 'no_forwarders': False, 'external_ca_profile': None, 'external_ca_type': None, 'no_ntp': False, 'no_msdcs': False, 'setup_kra': False, 'domain_name': None, 'idmax': None, 'setup_adtrust': False, 'http_cert_name': None, 'dirsrv_cert_files': None, 'no_dnssec_validation': False, 'ca_signing_algorithm': None, 'no_reverse': False, 'ssh_trust_dns': False, 'pkinit_cert_files': None, 'ca_cert_files': None, 'subject_base': None, 'auto_reverse': False, 'auto_forwarders': False, 'no_host_dns': False, 'no_sshd': False, 'no_ui_redirect': False, 'ignore_last_of_role': False, 'realm_name': None, 'forwarders': None, 'idstart': None, 'external_ca': False, 'pkinit_cert_name': None, 'no_ssh': False, 'external_cert_files': None, 'enable_compat': False, 'no_hbac_allow': False, 'forward_policy': None, 'dirsrv_cert_name': None, 'unattended': False, 'rid_base': None, 'quiet': False, 'setup_dns': False, 'ca_subject': None, 'host_name': None, 'dirsrv_config_file': None, 'log_file': None, 'allow_zone_overlap': False, 'uninstall': False}
2022-12-15T13:43:31Z DEBUG IPA version 4.6.8-5.el7.centos.12
2022-12-15T13:43:31Z DEBUG Searching for an interface of IP address: ::1
2022-12-15T13:43:31Z DEBUG Testing local IP address: ::1/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff (interface: lo)
2022-12-15T13:43:31Z DEBUG Starting external process
2022-12-15T13:43:31Z DEBUG args=/usr/sbin/selinuxenabled
2022-12-15T13:43:31Z DEBUG Process finished, return code=1
2022-12-15T13:43:31Z DEBUG stdout=
2022-12-15T13:43:31Z DEBUG stderr=
2022-12-15T13:43:31Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2022-12-15T13:43:31Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2022-12-15T13:43:31Z DEBUG httpd is not configured
2022-12-15T13:43:31Z DEBUG kadmin is not configured
2022-12-15T13:43:31Z DEBUG dirsrv is not configured
2022-12-15T13:43:31Z DEBUG pki-tomcatd is not configured
2022-12-15T13:43:31Z DEBUG install is not configured
2022-12-15T13:43:31Z DEBUG krb5kdc is not configured
2022-12-15T13:43:31Z DEBUG ntpd is not configured
2022-12-15T13:43:31Z DEBUG named is not configured
2022-12-15T13:43:31Z DEBUG filestore is tracking no files
2022-12-15T13:43:31Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'
2022-12-15T13:43:31Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2022-12-15T13:43:31Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2022-12-15T13:43:31Z DEBUG Starting external process
2022-12-15T13:43:31Z DEBUG args=/bin/systemctl is-enabled chronyd.service
2022-12-15T13:43:31Z DEBUG Process finished, return code=1
2022-12-15T13:43:31Z DEBUG stdout=
2022-12-15T13:43:31Z DEBUG stderr=Failed to get D-Bus connection: No such file or directory
2022-12-15T13:43:31Z DEBUG Starting external process
2022-12-15T13:43:31Z DEBUG args=/bin/systemctl is-active chronyd.service
2022-12-15T13:43:31Z DEBUG Process finished, return code=1
2022-12-15T13:43:31Z DEBUG stdout=
2022-12-15T13:43:31Z DEBUG stderr=Failed to get D-Bus connection: No such file or directory
2022-12-15T13:43:31Z DEBUG Starting external process
2022-12-15T13:43:31Z DEBUG args=/usr/sbin/httpd -t -D DUMP_VHOSTS
2022-12-15T13:43:31Z DEBUG Process finished, return code=0
2022-12-15T13:43:31Z DEBUG stdout=VirtualHost configuration:
*:8443 ipa.domain.tld (/etc/httpd/conf.d/nss.conf:81)
2022-12-15T13:43:31Z DEBUG stderr=
2022-12-15T13:44:06Z DEBUG Check if ipa.domain.tld is a primary hostname for localhost
2022-12-15T13:44:06Z DEBUG Primary hostname for localhost: ipa.domain.tld
2022-12-15T13:44:06Z DEBUG Search DNS for ipa.domain.tld
2022-12-15T13:44:06Z DEBUG Check if ipa.domain.tld is not a CNAME
2022-12-15T13:44:06Z DEBUG Check reverse address of 192.168.1.12
2022-12-15T13:44:06Z DEBUG Found reverse name: ipa.domain.tld
2022-12-15T13:44:06Z DEBUG will use host_name: ipa.domain.tld
2022-12-15T13:44:11Z DEBUG read domain_name: domain.tld
2022-12-15T13:44:18Z DEBUG read realm_name: DOMAIN.TLD
2022-12-15T13:45:05Z DEBUG importing all plugin modules in ipaserver.plugins...
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.aci
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.automember
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.automount
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.baseldap
2022-12-15T13:45:05Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.baseuser
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.batch
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.ca
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.caacl
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.cert
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.certmap
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.certprofile
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.config
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.delegation
2022-12-15T13:45:05Z DEBUG importing plugin module ipaserver.plugins.dns
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.dnsserver
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.dogtag
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.domainlevel
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.group
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.hbac
2022-12-15T13:45:06Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.hbacrule
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.hbacsvc
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.hbactest
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.host
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.hostgroup
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.idrange
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.idviews
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.internal
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.join
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.ldap2
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.location
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.migration
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.misc
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.netgroup
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.otp
2022-12-15T13:45:06Z DEBUG ipaserver.plugins.otp is not a valid plugin module
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.otpconfig
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.otptoken
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.passwd
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.permission
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.ping
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.pkinit
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.privilege
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.pwpolicy
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.rabase
2022-12-15T13:45:06Z DEBUG ipaserver.plugins.rabase is not a valid plugin module
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.radiusproxy
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.realmdomains
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.role
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.schema
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.selfservice
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.server
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.serverrole
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.serverroles
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.service
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.servicedelegation
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.session
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.stageuser
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.sudo
2022-12-15T13:45:06Z DEBUG ipaserver.plugins.sudo is not a valid plugin module
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.sudocmd
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.sudorule
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.topology
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.trust
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.user
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.vault
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.virtual
2022-12-15T13:45:06Z DEBUG ipaserver.plugins.virtual is not a valid plugin module
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.whoami
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.plugins.xmlserver
2022-12-15T13:45:06Z DEBUG importing all plugin modules in ipaserver.install.plugins...
2022-12-15T13:45:06Z DEBUG importing plugin module ipaserver.install.plugins.adtrust
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.ca_renewal_master
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.dns
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.fix_kra_people_entry
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.fix_replica_agreements
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.rename_managed
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_ca_topology
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_dna_shared_config
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_idranges
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_ldap_server_list
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_managed_permissions
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_nis
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_pacs
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_passsync
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_ra_cert_store
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_referint
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_services
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_unhashed_password
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.update_uniqueness
2022-12-15T13:45:11Z DEBUG importing plugin module ipaserver.install.plugins.upload_cacrt
2022-12-15T13:45:13Z DEBUG Name ipa.domain.tld resolved to set([UnsafeIPAddress('192.168.1.12')])
2022-12-15T13:45:13Z DEBUG Searching for an interface of IP address: 192.168.1.12
2022-12-15T13:45:13Z DEBUG Testing local IP address: 127.0.0.1/255.0.0.0 (interface: lo)
2022-12-15T13:45:13Z DEBUG Testing local IP address: 192.168.1.12/255.255.254.0 (interface: eth0)
2022-12-15T13:45:30Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 178, in execute
return_value = self.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 319, in run
return cfgr.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 358, in run
self.validate()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 368, in validate
for _nothing in self._validator():
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 431, in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 455, in _handle_validate_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 450, in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 418, in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 633, in _configure
next(validator)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 431, in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 455, in _handle_validate_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518, in _handle_exception
self.__parent._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 450, in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 515, in _handle_exception
super(ComponentBase, self)._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 450, in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 418, in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 65, in _install
for unused in self._installer(self.parent):
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py", line 588, in main
master_install_check(self)
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 250, in decorated
func(installer)
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 689, in install_check
raise ScriptError("Installation aborted")
2022-12-15T13:45:30Z DEBUG The ipa-server-install command failed, exception: ScriptError: Installation aborted
2022-12-15T13:45:30Z ERROR Installation aborted
2022-12-15T13:45:30Z ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
which seems more like a network validation error than anything to do with cgroup/systemd
I'd still be a bit worried about the
Failed to get D-Bus connection: No such file or directory
messages.
Also, if the only container that you are able to get to run on that machine is CentOS 7 based, I'd really question the host platform. You likely do not want to create new CentOS 7-based deployments in 2022/2023.
I'd still be a bit worried about the
Rightfully so. It seems very much like in the end it's a problem with Systemd not existing.
So I know quite a little about Slackware in the past 20 or so years but googling around suggests it does not use systemd. Does Unraid use systemd? Without systemd in the host, I'd assume any attempts to run a systemd-based container would be futile.
So what you are saying is that this isn't going to work and or it's not supported?
Although I found this reddit post that was pointing to this guide showcasing how to set it up. That example is using Ubuntu but all the reddit comments are about unraid
Its a little strange that others report having gotten this working with Unraid as the host seeing as this would seem more like a fundamental blocker rather than just an inconvenience
Edit: Also this project which is trying to compile systemd for slackware???
I believe you really need to bring these questions (how do you run a systemd-based container on Slackware / Unraid) to the Slackware / Unraid forums / support channels.
When trying to start FreeIPA using docker on Unraid I get this error:
For reference here is the command I used:
As suggested by @adelton in #72 I ran
tests/run-partial-tests.sh Dockerfile.almalinux-9
and the output for that can be found here:Output of
docker info
OS is Unraid 6.9.2 which is based on slackware