openstack/tripleo-quickstart-extras
Code Issues Proposed changes

Ensure NSS package is updated for FreeIPA deploy

Browse Source 
There is an issue with older versions of NSS that will result in
the CA server not launching and subsequently blowing up the
FreeIPA deployment. The resulting logs do not clearly identify this
package as the culprit.

Change-Id: Ibb3b62253c1a1ae4f7fb56791619a84ce9f9042f
This commit is contained in:
Harry Rybacki 2019-12-11 15:32:43 -05:00
parent 66ce22d6ed
commit 38ef0457f8
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
roles/freeipa-setup/templates/deploy_freeipa.sh.j2
View File

@ -30,6 +30,10 @@ sed -i "1i$IPA_SERVER_IP $CA_SERVER_HOSTNAME" /etc/hosts
yum install -yq ipa-server ipa-server-dns curl epel-release
## * Update NSS (required for CA server to launch during deploy)
yum update -y nss
## * Increase system entropy (to prevent slow down during IPA installation)::
curl -Lo ius-release.rpm https://centos7.iuscommunity.org/ius-release.rpm