Hi Any ideas - VirtualBox - Fedora 27 server 4 CPUs and 4G ram (started at 2+2) and it STILL dies at trying to restart the CA and fails after 300.0s I have systems smaller than this running FreeIPA, so I can't believe it is a resource? Maybe a Fedora thing? Is there some way to increase the timeout? It just seems crazy that I need to allocate so much of my machine - I remember on older versions I ran it with 2 CPUs on 1G.

But why would it work perfectly with CentOS on VBox, but not Fedora? No changes - still VirtualBox, just CentOS vs Fedora.

On 3/17/18 01:55, Alexander Bokovoy wrote: >On pe, 16 maalis 2018, Kat via FreeIPA-users wrote: >>Hi >> >>Any ideas - VirtualBox - Fedora 27 server 4 CPUs and 4G ram >>(started at 2+2) and it STILL dies at trying to restart the CA and >>fails after 300.0s >> >>I have systems smaller than this running FreeIPA, so I can't >>believe it is a resource? Maybe a Fedora thing? Is there some way >>to increase the timeout? It just seems crazy that I need to >>allocate so much of my machine - I remember on older versions I >>ran it with 2 CPUs on 1G. >If CA does not start after 300.0 chances are your VirtualBox setup does >not provide enough entropy to get randomness needed for generating >certificates and keys. No amount of memory and CPU would help with that. > >See, for example, https://www.virtualbox.org/ticket/11297 > >Unfortunately, virtualbox developers still did not add support for >virtio-rng unlike all others. > >You can use something like haveged to improve entropy provided to VMs. > _______________________________________________ FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org

On 03/17/2018 05:21 PM, Alexander Bokovoy via FreeIPA-users wrote: > On Sat, 17 Mar 2018, Kat via FreeIPA-users wrote: >> But why would it work perfectly with CentOS on VBox, but not Fedora? >> >> No changes - still VirtualBox, just CentOS vs Fedora. >> > Different software, including different (much older) kernel and glibc. > > I'm not really interested in VirtualBox and though I'm feeling your > pain, all I can recommend is to use a better virtualization software. > >> >> On 3/17/18 01:55, Alexander Bokovoy wrote: >>> On pe, 16 maalis 2018, Kat via FreeIPA-users wrote: >>>> Hi >>>> >>>> Any ideas - VirtualBox - Fedora 27 server 4 CPUs and 4G ram >>>> (started at 2+2) and it STILL dies at trying to restart the CA and >>>> fails after 300.0s >>>> >>>> I have systems smaller than this running FreeIPA, so I can't >>>> believe it is a resource? Maybe a Fedora thing? Is there some way >>>> to increase the timeout? It just seems crazy that I need to >>>> allocate so Hi, JFTR, the timeout used during installation can be tuned by creating /etc/ipa/installer.conf with the desired value: $ cat /etc/ipa/installer.conf [global] startup_timeout=600 Flo >>>> much of my machine - I remember on older versions I ran it with 2 >>>> CPUs on 1G. >>> If CA does not start after 300.0 chances are your VirtualBox setup >>> does >>> not provide enough entropy to get randomness needed for generating >>> certificates and keys. No amount of memory and CPU would help with >>> that. >>> >>> See, for example, https://www.virtualbox.org/ticket/11297 >>> >>> Unfortunately, virtualbox developers still did not add support for >>> virtio-rng unlike all others. >>> >>> You can use something like haveged to improve entropy provided to VMs. >>> >> _______________________________________________ >> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org >> To unsubscribe send an email to >> freeipa-users-leave(a)lists.fedorahosted.org >

On ma, 19 maalis 2018, Kat wrote: > Thank you so much for that -- I tried it and it worked. > > I know this is OSS and we can't expect 100% dedicated support, but > this is a great project and sometimes, just offering a simple > suggestion, in this case one I did not know about, goes a long way to > help. I promote IPA to the world every chance I get (and with it - > RedHat) but the previous answer of - "Virtualbox sucks" > (paraphrasing) does not help much.  Thanks again for your help and > suggestion. I'm glad that Flo's suggestion worked for you. Regarding VirtualBox, the fact that you needed to increase timeouts in order to proceed actually confirms that the issue is with not enough entropy being available. While my observation of that wasn't helpful to you, make sure in future to not forget about the entropy. Most likely this will affect your use of other FreeIPA features under VirtualBox. > > Kat > > > On 3/19/18 03:33, Florence Blanc-Renaud wrote: >> On 03/17/2018 05:21 PM, Alexander Bokovoy via FreeIPA-users wrote: >>> On Sat, 17 Mar 2018, Kat via FreeIPA-users wrote: >>>> But why would it work perfectly with CentOS on VBox, but not Fedora? >>>> >>>> No changes - still VirtualBox, just CentOS vs Fedora. >>>> >>> Different software, including different (much older) kernel and glibc. >>> >>> I'm not really interested in VirtualBox and though I'm feeling your >>> pain, all I can recommend is to use a better virtualization software. >>> >>>> >>>> On 3/17/18 01:55, Alexander Bokovoy wrote: >>>>> On pe, 16 maalis 2018, Kat via FreeIPA-users wrote: >>>>>> Hi >>>>>> >>>>>> Any ideas - VirtualBox - Fedora 27 server 4 CPUs and 4G ram >>>>>> (started at 2+2) and it STILL dies at trying to restart the CA >>>>>> and fails after 300.0s >>>>>> >>>>>> I have systems smaller than this running FreeIPA, so I can't >>>>>> believe it is a resource? Maybe a Fedora thing? Is there some >>>>>> way to increase the timeout? It just seems crazy that I need to >>>>>> allocate so >> Hi, >> >> JFTR, the timeout used during installation can be tuned by creating >> /etc/ipa/installer.conf with the desired value: >> >> $ cat /etc/ipa/installer.conf >> [global] >> startup_timeout=600 >> >> Flo >> >>>>>> much of my machine - I remember on older versions I ran it with >>>>>> 2 CPUs on 1G. >>>>> If CA does not start after 300.0 chances are your VirtualBox >>>>> setup does >>>>> not provide enough entropy to get randomness needed for generating >>>>> certificates and keys. No amount of memory and CPU would help >>>>> with that. >>>>> >>>>> See, for example, https://www.virtualbox.org/ticket/11297 >>>>> >>>>> Unfortunately, virtualbox developers still did not add support for >>>>> virtio-rng unlike all others. >>>>> >>>>> You can use something like haveged to improve entropy provided to >>>>> VMs. >>>>> >>>> _______________________________________________ >>>> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org >>>> To unsubscribe send an email to >>>> freeipa-users-leave(a)lists.fedorahosted.org >>> >> >