[Freeipa-users] container IPA fine but only until host's reboot

Hi guys. I've a replica in container which deploys & works seemingly a okey, container reboot is not detrimental to IPA yet host reboot seems to break LDAP down. Both container and host, are up to date Centos 9, it's a rootful container. So far - a several times - it reproduces each time - I can remove "broken" container, re-create anew, it works, then host reboots and ... a bummer. Anybody seen this or similar issues? Log snippets: -> $ ipactl restart Starting Directory Service Failed to start Directory Service: CalledProcessError(Command ['/bin/systemctl', 'start', 'dirsrv(a)MINE-PRIV.service'] returned non-zero exit status 1) Starting 389 Directory Server MINE-PRIV.... dirsrv(a)MINE-PRIV.service: ProtectHostname=yes is configured, but UTS namespace setup is prohibited (container manager?), ignoring namespace setup. dirsrv(a)MINE-PRIV.service: ProtectHostname=yes is configured, but UTS namespace setup is prohibited (container manager?), ignoring namespace setup. dirsrv(a)MINE-PRIV.service: ProtectHostname=yes is configured, but UTS namespace setup is prohibited (container manager?), ignoring namespace setup. [25/May/2023:20:38:08.747319489 +0000] - CRIT - Security Initialization - warn_if_no_cert_file - Certificate DB file cert8.db nor cert9.db exists in [/etc/dirsrv/slapd-MINE-PRIV] - SSL initialization will likely fail [25/May/2023:20:38:08.752730373 +0000] - CRIT - Security Initialization - warn_if_no_key_file - Key DB file key3.db nor key4.db exists in [/etc/dirsrv/slapd-MINE-PRIV] - SSL initialization will likely fail [25/May/2023:20:38:08.768566520 +0000] - ERR - Security Initialization - SSL failure: NSS initialization failed (Netscape Portable Runtime error -8174 - security library: bad database.): certdir: /etc/dirsrv/slapd-MINE-PRIV [25/May/2023:20:38:08.770531395 +0000] - ERR - force_to_disable_security - ERROR: NSS Initialization Failed. Disabling NSS. [25/May/2023:20:38:08.772440575 +0000] - ERR - set_workingdir - detach: failed to chdir to /var/log/dirsrv/slapd-MINE-PRIV [25/May/2023:20:38:08.774326540 +0000] - ERR - set_workingdir - detach: set workingdir failed with "Working directory "/" is not writeable." [25/May/2023:20:38:08.776402306 +0000] - INFO - main - 389-Directory/2.2.4 B2022.347.0000 starting up [25/May/2023:20:38:08.778279795 +0000] - INFO - main - Setting the maximum file descriptor limit to: 1024 [25/May/2023:20:38:08.780257034 +0000] - ERR - fedse_create_startOK - Cannot copy DSE file "/etc/dirsrv/slapd-MINE-PRIV/dse.ldif" to "/etc/dirsrv/slapd-MINE-PRIV/dse.ldif.startOK" OS error 13 (Permission denied) [25/May/2023:20:38:08.782222230 +0000] - ERR - dse_write_file_nolock - Cannot open temporary DSE file "/etc/dirsrv/slapd-MINE-PRIV/dse.ldif.tmp" for update: OS error 13 (Permission denied) [25/May/2023:20:38:08.787607325 +0000] - ERR - PBKDF2_SHA256 - Unable to generate algorithm ID. [25/May/2023:20:38:08.789526243 +0000] - ERR - PBKDF2_SHA256 - Could not generate pbkdf2_sha256_hash! [25/May/2023:20:38:08.791436584 +0000] - ERR - PBKDF2_SHA256 - Unable to generate algorithm ID. [25/May/2023:20:38:08.793404806 +0000] - ERR - PBKDF2_SHA256 - Could not generate pbkdf2_sha256_hash! [25/May/2023:20:38:08.795305449 +0000] - ERR - PBKDF2_SHA256 - Unable to generate algorithm ID. [25/May/2023:20:38:08.797253522 +0000] - ERR - PBKDF2_SHA256 - Could not generate pbkdf2_sha256_hash! [25/May/2023:20:38:08.799164114 +0000] - ERR - PBKDF2_SHA256 - Unable to generate algorithm ID. [25/May/2023:20:38:08.801065298 +0000] - ERR - PBKDF2_SHA256 - Could not generate pbkdf2_sha256_hash! [25/May/2023:20:38:08.803027158 +0000] - ERR - PBKDF2_SHA256 - Unable to generate algorithm ID. [25/May/2023:20:38:08.804938281 +0000] - ERR - PBKDF2_SHA256 - Could not generate pbkdf2_sha256_hash! [25/May/2023:20:38:08.806866727 +0000] - ERR - PBKDF2_SHA256 - Unable to generate algorithm ID. [25/May/2023:20:38:08.808871438 +0000] - ERR - PBKDF2_SHA256 - Could not generate pbkdf2_sha256_hash! [25/May/2023:20:38:08.810796257 +0000] - ERR - PBKDF2_SHA256 - Unable to generate algorithm ID. [25/May/2023:20:38:08.812761433 +0000] - ERR - PBKDF2_SHA256 - Could not generate pbkdf2_sha256_hash! [25/May/2023:20:38:08.814675903 +0000] - ERR - PBKDF2_SHA256 - Unable to generate algorithm ID. [25/May/2023:20:38:08.816595692 +0000] - ERR - PBKDF2_SHA256 - Could not generate pbkdf2_sha256_hash! [25/May/2023:20:38:08.818568974 +0000] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 12000 rounds [25/May/2023:20:38:08.822101547 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 [25/May/2023:20:38:08.824226177 +0000] - INFO - ldbm_instance_config_set - instance: userRoot attr aci [25/May/2023:20:38:08.826218264 +0000] - INFO - ldbm_instance_config_set - instance: userRoot attr nsslapd-cachesize [25/May/2023:20:38:08.828147422 +0000] - INFO - ldbm_instance_config_set - instance: userRoot attr nsslapd-cachememsize [25/May/2023:20:38:08.830689678 +0000] - INFO - ldbm_instance_config_set - instance: userRoot attr nsslapd-readonly [25/May/2023:20:38:08.832725468 +0000] - INFO - ldbm_instance_config_set - instance: userRoot attr nsslapd-require-index [25/May/2023:20:38:08.834666098 +0000] - INFO - ldbm_instance_config_set - instance: userRoot attr nsslapd-require-internalop-index [25/May/2023:20:38:08.836658115 +0000] - INFO - ldbm_instance_config_set - instance: userRoot attr nsslapd-dncachememsize [25/May/2023:20:38:08.838859671 +0000] - INFO - ldbm_instance_config_set - instance: userRoot attr nsslapd-directory [25/May/2023:20:38:08.843583015 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 [25/May/2023:20:38:08.845746619 +0000] - INFO - ldbm_instance_config_set - instance: ipaca attr nsslapd-cachesize [25/May/2023:20:38:08.847696185 +0000] - INFO - ldbm_instance_config_set - instance: ipaca attr nsslapd-cachememsize [25/May/2023:20:38:08.850034512 +0000] - INFO - ldbm_instance_config_set - instance: ipaca attr nsslapd-readonly [25/May/2023:20:38:08.852052299 +0000] - INFO - ldbm_instance_config_set - instance: ipaca attr nsslapd-require-index [25/May/2023:20:38:08.854005963 +0000] - INFO - ldbm_instance_config_set - instance: ipaca attr nsslapd-require-internalop-index [25/May/2023:20:38:08.855960008 +0000] - INFO - ldbm_instance_config_set - instance: ipaca attr nsslapd-dncachememsize [25/May/2023:20:38:08.858087924 +0000] - INFO - ldbm_instance_config_set - instance: ipaca attr nsslapd-directory [25/May/2023:20:38:08.862288731 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 [25/May/2023:20:38:08.864482192 +0000] - INFO - ldbm_instance_config_set - instance: changelog attr nsslapd-cachesize [25/May/2023:20:38:08.866449653 +0000] - INFO - ldbm_instance_config_set - instance: changelog attr nsslapd-cachememsize [25/May/2023:20:38:08.868618397 +0000] - INFO - ldbm_instance_config_set - instance: changelog attr nsslapd-readonly [25/May/2023:20:38:08.870625282 +0000] - INFO - ldbm_instance_config_set - instance: changelog attr nsslapd-require-index [25/May/2023:20:38:08.872589927 +0000] - INFO - ldbm_instance_config_set - instance: changelog attr nsslapd-require-internalop-index [25/May/2023:20:38:08.874549833 +0000] - INFO - ldbm_instance_config_set - instance: changelog attr nsslapd-dncachememsize [25/May/2023:20:38:08.876699000 +0000] - INFO - ldbm_instance_config_set - instance: changelog attr nsslapd-directory [25/May/2023:20:38:08.880669548 +0000] - NOTICE - bdb_start_autotune - found 32506232k physical memory [25/May/2023:20:38:08.882702473 +0000] - NOTICE - bdb_start_autotune - found 28174216k available [25/May/2023:20:38:08.884678500 +0000] - NOTICE - bdb_start_autotune - cache autosizing: db cache: 1572864k [25/May/2023:20:38:08.886641071 +0000] - NOTICE - bdb_start_autotune - cache autosizing: userRoot entry cache (3 total): 2031616k [25/May/2023:20:38:08.889062407 +0000] - NOTICE - bdb_start_autotune - cache autosizing: userRoot dn cache (3 total): 262144k [25/May/2023:20:38:08.891234948 +0000] - NOTICE - bdb_start_autotune - cache autosizing: ipaca entry cache (3 total): 2031616k [25/May/2023:20:38:08.893482262 +0000] - NOTICE - bdb_start_autotune - cache autosizing: ipaca dn cache (3 total): 262144k [25/May/2023:20:38:08.895602163 +0000] - NOTICE - bdb_start_autotune - cache autosizing: changelog entry cache (3 total): 2031616k [25/May/2023:20:38:08.897693539 +0000] - NOTICE - bdb_start_autotune - cache autosizing: changelog dn cache (3 total): 262144k [25/May/2023:20:38:08.899736183 +0000] - NOTICE - bdb_start_autotune - total cache size: 8657043456 B; [25/May/2023:20:38:08.901810216 +0000] - ERR - bdb_version_write - Could not open file "/var/lib/dirsrv/slapd-MINE-PRIV/db/DBVERSION" for writing Netscape Portable Runtime -5966 (Access Denied.) [25/May/2023:20:38:08.903797254 +0000] - ERR - mkdir_p - /var/lib/dirsrv: error -5943 (Cannot create or rename a filename that already exists.) [25/May/2023:20:38:08.905887528 +0000] - CRIT - bdb_start - Can't start because the database directory "/var/lib/dirsrv/slapd-MINE-PRIV/db" either doesn't exist, or is not accessible [25/May/2023:20:38:08.907883443 +0000] - ERR - ldbm_back_start - Failed to init database, err=-1 Unexpected dbimpl error code [25/May/2023:20:38:08.909873536 +0000] - ERR - plugin_dependency_startall - Failed to start database plugin ldbm database [25/May/2023:20:38:08.912185504 +0000] - ERR - schema-compat-plugin - scheduled schema-compat-plugin tree scan in about 5 seconds after the server startup! [25/May/2023:20:38:08.914588354 +0000] - CRIT - dblayer_setup - dblayer_init failed [25/May/2023:20:38:08.916582074 +0000] - ERR - ldbm_back_start - Failed to setup dblayer [25/May/2023:20:38:08.918659775 +0000] - ERR - plugin_dependency_startall - Failed to start database plugin ldbm database [25/May/2023:20:38:08.920651491 +0000] - ERR - plugin_dependency_startall - Failed to resolve plugin dependencies [25/May/2023:20:38:08.922769498 +0000] - ERR - plugin_dependency_startall - betxnpreoperation plugin 7-bit check is not started [25/May/2023:20:38:08.924779700 +0000] - ERR - plugin_dependency_startall - preoperation plugin Account Usability Plugin is not started [25/May/2023:20:38:08.926780244 +0000] - ERR - plugin_dependency_startall - accesscontrol plugin ACL Plugin is not started [25/May/2023:20:38:08.928838868 +0000] - ERR - plugin_dependency_startall - preoperation plugin ACL preoperation is not started [25/May/2023:20:38:08.930855532 +0000] - ERR - plugin_dependency_startall - betxnpreoperation plugin Auto Membership Plugin is not started [25/May/2023:20:38:08.932879861 +0000] - ERR - plugin_dependency_startall - preoperation plugin caacl name uniqueness is not started [25/May/2023:20:38:08.934954846 +0000] - ERR - plugin_dependency_startall - preoperation plugin certificate store issuer/serial uniqueness is not started [25/May/2023:20:38:08.936969697 +0000] - ERR - plugin_dependency_startall - preoperation plugin certificate store subject uniqueness is not started [25/May/2023:20:38:08.939096711 +0000] - ERR - plugin_dependency_startall - object plugin Class of Service is not started [25/May/2023:20:38:08.941113295 +0000] - ERR - plugin_dependency_startall - object plugin Content Synchronization is not started [25/May/2023:20:38:08.943127434 +0000] - ERR - plugin_dependency_startall - preoperation plugin deref is not started [25/May/2023:20:38:08.945181109 +0000] - ERR - plugin_dependency_startall - bepreoperation plugin Distributed Numeric Assignment Plugin is not started [25/May/2023:20:38:08.947196180 +0000] - ERR - plugin_dependency_startall - preoperation plugin IPA DNS is not started [25/May/2023:20:38:08.949205500 +0000] - ERR - plugin_dependency_startall - object plugin IPA Graceperiod is not started [25/May/2023:20:38:08.951276348 +0000] - ERR - plugin_dependency_startall - object plugin IPA Lockout is not started [25/May/2023:20:38:08.953303542 +0000] - ERR - plugin_dependency_startall - betxnpostoperation plugin IPA MODRDN is not started [25/May/2023:20:38:08.955319695 +0000] - ERR - plugin_dependency_startall - preoperation plugin IPA OTP Counter is not started [25/May/2023:20:38:08.957401373 +0000] - ERR - plugin_dependency_startall - preoperation plugin IPA OTP Last Token is not started [25/May/2023:20:38:08.959428697 +0000] - ERR - plugin_dependency_startall - preoperation plugin IPA Range-Check is not started [25/May/2023:20:38:08.961479948 +0000] - ERR - plugin_dependency_startall - postoperation plugin IPA SIDGEN is not started [25/May/2023:20:38:08.963520437 +0000] - ERR - plugin_dependency_startall - object plugin IPA Topology Configuration is not started [25/May/2023:20:38:08.965548823 +0000] - ERR - plugin_dependency_startall - preoperation plugin IPA UUID is not started [25/May/2023:20:38:08.967588822 +0000] - ERR - plugin_dependency_startall - preoperation plugin IPA Version Replication is not started [25/May/2023:20:38:08.969640553 +0000] - ERR - plugin_dependency_startall - preoperation plugin ipa-winsync is not started [25/May/2023:20:38:08.971679109 +0000] - ERR - plugin_dependency_startall - extendedop plugin ipa_enrollment_extop is not started [25/May/2023:20:38:08.973720600 +0000] - ERR - plugin_dependency_startall - extendedop plugin ipa_extdom_extop is not started [25/May/2023:20:38:08.975765037 +0000] - ERR - plugin_dependency_startall - extendedop plugin ipa_pwd_extop is not started [25/May/2023:20:38:08.977817560 +0000] - ERR - plugin_dependency_startall - preoperation plugin ipaSubordinateIdEntry ipaOwner uniqueness is not started [25/May/2023:20:38:08.979867658 +0000] - ERR - plugin_dependency_startall - preoperation plugin ipaUniqueID uniqueness is not started [25/May/2023:20:38:08.981913688 +0000] - ERR - plugin_dependency_startall - preoperation plugin krbCanonicalName uniqueness is not started [25/May/2023:20:38:08.983974386 +0000] - ERR - plugin_dependency_startall - preoperation plugin krbPrincipalName uniqueness is not started [25/May/2023:20:38:08.986051896 +0000] - ERR - plugin_dependency_startall - database plugin ldbm database is not started [25/May/2023:20:38:08.988109989 +0000] - ERR - plugin_dependency_startall - betxnpreoperation plugin Linked Attributes is not started [25/May/2023:20:38:08.990170186 +0000] - ERR - plugin_dependency_startall - betxnpreoperation plugin Managed Entries is not started [25/May/2023:20:38:08.992227157 +0000] - ERR - plugin_dependency_startall - betxnpostoperation plugin MemberOf Plugin is not started [25/May/2023:20:38:08.994270532 +0000] - ERR - plugin_dependency_startall - object plugin Multisupplier Replication Plugin is not started [25/May/2023:20:38:08.996345598 +0000] - ERR - plugin_dependency_startall - preoperation plugin netgroup uniqueness is not started [25/May/2023:20:38:08.998405354 +0000] - ERR - plugin_dependency_startall - betxnpostoperation plugin referential integrity postoperation is not started [25/May/2023:20:38:09.000484848 +0000] - ERR - plugin_dependency_startall - object plugin Retro Changelog Plugin is not started [25/May/2023:20:38:09.002615038 +0000] - ERR - plugin_dependency_startall - object plugin Roles Plugin is not started [25/May/2023:20:38:09.004668452 +0000] - ERR - plugin_dependency_startall - preoperation plugin sudorule name uniqueness is not started [25/May/2023:20:38:09.006728329 +0000] - ERR - plugin_dependency_startall - preoperation plugin uid uniqueness is not started [25/May/2023:20:38:09.008808835 +0000] - ERR - plugin_dependency_startall - object plugin USN is not started [25/May/2023:20:38:09.010895272 +0000] - ERR - plugin_dependency_startall - object plugin Views is not started [25/May/2023:20:38:09.012962683 +0000] - ERR - plugin_dependency_startall - extendedop plugin whoami is not started dirsrv(a)MINE-PRIV.service: Main process exited, code=exited, status=1/FAILURE dirsrv(a)MINE-PRIV.service: Failed with result 'exit-code'. Failed to start 389 Directory Server MINE-PRIV..