Might the 'edition' (server, desktop, iot, whatnot) of the distribution used in testing freeipa-server* be explicitly stated in the 'getting started' docs as being 'approved' for freeipa-server use?   The better to avoid interactions with un-interaction-tested packages / security libraries generally seen only in user/special-purpose distros.  (re: dnssec  / bind9 / smart-card interaction) HC