(See the related issue for FreeIPA)
On systems where /proc/sys/crypto is absent, FreeIPA 4.6.3's freeipa-server-install fails during dogtag configuration; see below-pasted debug log.
/proc/sys/crypto
freeipa-server-install
The RPM is pki-ca-10.5.7-2.fc27.noarch.
pki-ca-10.5.7-2.fc27.noarch
/proc/sys/crypto may be absent on CoreOS Container Linux systems (my environment), as well as Ubuntu (as reported here, and confirmed on one of our 16.04 Xenial systems).
2018-06-27T02:21:46Z DEBUG Starting external process 2018-06-27T02:21:46Z DEBUG args=/usr/sbin/pkispawn -s CA -f /tmp/tmp8pcfosjl 2018-06-27T02:24:02Z DEBUG Process finished, return code=1 2018-06-27T02:24:02Z DEBUG stdout=Log file: /var/log/pki/pki-ca-spawn.20180627022147.log Loading deployment configuration from /tmp/tmp8pcfosjl. WARNING: The 'pki_ssl_server_nickname' in [CA] has been deprecated. Use 'pki_sslserver_nickname' instead. WARNING: The 'pki_ssl_server_subject_dn' in [CA] has been deprecated. Use 'pki_sslserver_subject_dn' instead. Installing CA into /var/lib/pki/pki-tomcat. Storing deployment configuration into /etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg. Installation failed: server failed to restart 2018-06-27T02:24:02Z DEBUG stderr=pkispawn : ERROR ....... subprocess.CalledProcessError: Command '['sysctl', 'crypto.fips_enabled', '-bn']' returned non-zero exit status 255! pkispawn : ERROR ....... server failed to restart 2018-06-27T02:24:02Z CRITICAL Failed to configure CA instance: Command '/usr/sbin/pkispawn -s CA -f /tmp/tmp8pcfosjl' returned non-zero exit status 1. 2018-06-27T02:24:02Z CRITICAL See the installation logs and the following files/directories for more information: 2018-06-27T02:24:02Z CRITICAL /var/log/pki/pki-tomcat 2018-06-27T02:24:02Z DEBUG Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/ipaserver/install/dogtaginstance.py", line 150, in spawn_instance ipautil.run(args, nolog=nolog_list) File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 561, in run raise CalledProcessError(p.returncode, arg_string, str(output)) subprocess.CalledProcessError: Command '/usr/sbin/pkispawn -s CA -f /tmp/tmp8pcfosjl' returned non-zero exit status 1.
PR #18 resolves this.
Fixed in master:
Metadata Update from @edewata: - Custom field component adjusted to None - Custom field feature adjusted to None - Custom field origin adjusted to None - Custom field proposedmilestone adjusted to None - Custom field proposedpriority adjusted to None - Custom field reviewer adjusted to None - Custom field type adjusted to None - Custom field version adjusted to None - Issue close_status updated to: fixed - Issue set to the milestone: 10.6.3 - Issue status updated to: Closed (was: Open)
Thanks!
Metadata Update from @zultron: - Issue status updated to: Open (was: Closed)
Thank you!
Metadata Update from @edewata: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)
Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.
This issue has been cloned to GitHub and is available here: https://github.com/dogtagpki/pki/issues/3157
If you want to receive further updates on the issue, please navigate to the GitHub issue and click on Subscribe button.
Subscribe
Thank you for understanding, and we apologize for any inconvenience.
Login to comment on this ticket.