#7919 Allow installations on low-performance systems
Opened a year ago by cheimes. Modified a year ago

Request for enhancement

This is a tracker ticket to collect action items for installation of IPA on low-powered systems like Raspberry Pi or similar SoC ARM systems. These platforms have typically few CPU cores, less memory, and a slow persistent storage like a SD card.


Reduce memory footprint of Dogtag's Tomcat server

Tomcat is a Java applications that can consume and reserve a considerable chunk of memory. Java can be tuned to take up less memory and free memory earlier with settings like JAVA_OPTS="-Xmx256M -Xms256M".

Increase time out for systemd service start

Tune systemd settings DefaultTimeoutStartSec=, DefaultTimeoutStopSec=, DefaultRestartSec= as documented at https://www.freedesktop.org/software/systemd/man/systemd-system.conf.html . The start timeout is usually 90 seconds

Increase wait timeout for IPA services

Timeout can be configured in /etc/ipa/default.conf, values startup_timeout, http_timeout, and replication_wait_timeout. The file is overwritten during the installation process. There are multiple options to address the problem:

  • use config specific overrides, e.g. installer.conf
  • improve the installer to merge an existing default.conf
  • have the installer merge an existing installer.conf into default.conf and remove it
  • add yet another config file like customize.conf that is loaded between the context specific config and default.conf.

note Some installers use installer context, other installers use install context.

Do we really want to spend time on this?

Sure it would be nice to improve Dogtag performance - indeed we should! But the stated use case (Raspberry Pi and other SoC ARM systems), seems extreme to me.

I see this as a community effort. If somebody from the community wants to spend time on this topic, then I'm happy to review patches and land sensible improvements in upstream. If nobody steps up in the next two years, then we can close the ticket. I expect that SoC systems will become powerful enough within the next two years.

Login to comment on this ticket.