This ticket is related to upgrade in fedup, when IPA cannot be upgraded during fedup.

Copied from: https://fedorahosted.org/freeipa/ticket/3849#comment:18

1. Add the following to the freeipa.service systemd unit:

   ExecStartPre=/usr/bin/ipa-server-upgrade

2. Modify ipa-server-upgrade to check the current and target versions of FreeIPA on the system and short-circuit to quick success to avoid slowing down the start-up of a fully-upgraded system.

This should still work with the upgrade environments because the freeipa.service unit should not be started at all, unless something in the system-upgrade.target Requires= or Wants= freeipa.service, which it never should. So what will happen is that the packages would be updated in the system-upgrade environment and then on the first "real" boot of the upgraded system, freeipa.service would be started and then run ipa-server-upgrade first.

Current behavior:

• IPA is not upgraded automatically after fedup, ipactl start prevents to run IPA if upgrade is needed and prompts user to execute ipa-server-upgrade manually

Reason why we decided not to execute ipa-server-upgrade automatically in past:

• ipa-server-upgrade takes several minutes, a user may wait for example 10 minutes until IPA starts, and during that time the one may try to restart services, kill process, etc, and break upgrade process
• IPA is not simple service, and in place upgrade to next major version should be done carefully, user should run it manually and resolve any issues printed by ipa-server-upgrade, if upgrade errors are hidden only in ipaupgrade.log and journal, the user may miss important information (recommended is to create new replica for new major version instead of in place upgrade)