How to skip hostname setup

[bioinfornatics]

Dear,

I have to skip the hostname setup as I use podman/rootless container.
So it is not allowed to change the container hostname in this case.

I take a look to the code and maybe they are a little gap by the use of _hostname_overridden
Indeed it seems that I could skip this step if the variable is set to false.

We can see at install.yml line 194 that the variable take the value from result_ipaserver_test object.
The object result_ipaserver_test is define between line 60 and line 128 but the key _hostname_overridden is not set.

then it is impossible to not override hostname

my goal is to avoid the call ['hostnamectl', 'set-hostname', hostname].
as Example I have a molecule.yml

---
scenario:
  name: default
  test_sequence:
    - dependency
    - lint
    - cleanup
    - destroy
    - syntax
    - create
    - prepare
    - converge
    - side_effect
    - verify
    - cleanup
    - destroy
dependency:
  name: galaxy
driver:
  name: podman
platforms:
  - name: ipa
#    image: quay.io/freeipa/freeipa-server:rocky-8-4.9.6
    image: quay.io/rockylinux/rockylinux
    pre_build_image: true
    privileged: false
    network: org_ipa
    subnet: 10.0.1.0/16
    ip: 10.0.1.1
    hostname: ipa.org.test
    exposed_ports:
# TODO: net.ipv4.ip_unprivileged_port_start=53 ...
#      - '53'
#      - '80'
#      - '88'
#      - '123'
#      - '389'
#      - '464'
#      - '636'
      - '8080'
      - '8443'
      - '9180'
      - '9443'
      - '9444'
      - '9445'
      - '9446'
      - '9701'
      - '7389'
    published_ports:
# TODO: net.ipv4.ip_unprivileged_port_start=53 ...
#      - '53:53'
#      - '80:80'
#      - '88:88'
#      - '123:123'
#      - '389:389'
#      - '464:464'
#      - '636:636'
      - '8080:8080'
      - '8443:8443'
      - '9180:9180'
      - '9443:9443'
      - '9444:9444'
      - '9445:9445'
      - '9446:9446'
      - '9701:9701'
      - '7389:7389'
    etc_hosts:
      ipa.org.test: 10.0.1.1
    systemd: 'always'
    command: /usr/sbin/init
    volumes:
      - /sys/fs/cgroup:/sys/fs/cgroup:ro
    groups:
      - all
      - ipa_server

  - name: client1
    image: quay.io/rockylinux/rockylinux
    pre_build_image: true
    privileged: false
    network: org_ipa
    subnet: 10.0.1.0/16
    ip: 10.0.1.2
    hostname: client1.org.test
    etc_hosts:
      client1.org.test: 10.0.1.2
    systemd: 'always'
    command: /usr/sbin/init
    volumes:
      - /sys/fs/cgroup:/sys/fs/cgroup:ro
    groups:
      - all
      - client
provisioner:
  name: ansible
  inventory:
    group_vars:
      all:
        ipaadmin_password: 'TodoSetPassword'
        ipa_domain: 'org.test'
        ipa_realm: 'ORG.TEST'
      ipa_server:
        ipadm_password: 'TodoSetPassword'
        is_ipa_replica: False
        ipaserver_setup_dns: True
        ipaserver_setup_kra: True
        ipaserver_auto_forwarders: True
        ipaserver_no_dnssec_validation: True
        ipaserver_auto_reverse: True
        ipaserver_domain: ipa.org.test
        ipaserver_realm: 'ORG.TEST'
        ipaserver_hostname: 'ipa.org.test'
        result_ipaserver_test:
          _hostname_overridden: False

    host_vars:
      ipa:
        inventory_ip: 10.0.1.1
      client1:
        inventory_ip: 10.0.1.2
verifier:
  name: ansible

and prepare.yml

---
- name: Prepare
  hosts: ipa_server
  gather_facts: false
  tasks:
   - name: Include ipaserver role
    include_role:
      name: freeipa.ansible_freeipa.ipaserver

actual Error

The full traceback is:
  File "/tmp/ansible_freeipa.ansible_freeipa.ipaserver_prepare_payload_y94bvc8b/ansible_freeipa.ansible_freeipa.ipaserver_prepare_payload.zip/ansible_collections/freeipa/ansible_freeipa/plugins/modules/ipaserver_prepare.py", line 383, in main
  File "/usr/lib/python3.6/site-packages/ipaplatform/redhat/tasks.py", line 587, in set_hostname
    ipautil.run([paths.BIN_HOSTNAMECTL, 'set-hostname', hostname])
  File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 599, in run
    p.returncode, arg_string, output_log, error_log
fatal: [ipa]: FAILED! => {
    "changed": false,
    "invocation": {
        "module_args": {
            "_hostname_overridden": true,
            "allow_zone_overlap": false,
            "auto_forwarders": true,
            "auto_reverse": true,
            "ca_cert_files": [],
            "ca_subject": null,
            "dm_password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
            "domain": "ipa.org.test",
            "enable_compat": false,
            "external_ca": false,
            "external_ca_profile": null,
            "external_ca_type": null,
            "external_cert_files": [],
            "force": false,
            "forward_policy": null,
            "forwarders": [],
            "hostname": "ipa.org.test",
            "ip_addresses": [],
            "netbios_name": null,
            "no_dnssec_validation": true,
            "no_forwarders": false,
            "no_host_dns": true,
            "no_reverse": false,
            "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
            "realm": "MSIO.TEST",
            "reverse_zones": [],
            "rid_base": null,
            "secondary_rid_base": null,
            "setup_adtrust": false,
            "setup_ca": true,
            "setup_dns": true,
            "setup_kra": true,
            "subject_base": null
        }
    },
    "msg": "CalledProcessError(Command ['/bin/hostnamectl', 'set-hostname', 'ipa.org.test'] returned non-zero exit status 1: 'Could not set property: Connection timed out\\n')"
}

@rjeffman did you have an idea how to fix it ?

[rjeffman]

@bioinfornatics, I'm having the same issues, if I use podman. I was able to execute the deployment using Docker.

I'm still investigating the issue, as something like CLI installation is working if you use podman with freiipa-container. freeipa-container uses the CLI installation, but there are some patches and tools I still haven't look into.

Running the deployment roles, with podman, is very high on my TODO list, but unfortunately I have no solution yet.

[bioinfornatics]

Hi @rjeffman
I tried to install freeipa server by the use of command line statement through molecule podman

converge.yml

---
- name: Converge
  hosts: client
  gather_facts: false
  tasks:
   
    - name: 'Enable identity management module'
      ansible.builtin.command: dnf module enable -y idm:DL1

    - name: 'Install IPA server packages'
      dnf:
        name:
          - 'net-tools'
          - 'ipa-server'
          - 'ipa-server-dns'
          - 'bind-dyndb-ldap'
          - 'httpd'
        state: 'latest'


    #- name: Include ipaserver role
    #  include_role:
    #    name: freeipa.ansible_freeipa.ipaserver

    - name: 'Configure freeipa server'
      ansible.builtin.command: |
        ipa-server-install -U \
                           --setup-dns \
                           --ntp-pool='pool.ntp.org' \
                           --auto-reverse \
                           --ssh-trust-dns \
                           --ds-password="{{ipadm_password}}" \
                           --admin-password="{{ipaadmin_password}}" \
                           --domain="{{ipa_domain}}" \
                           --realm="{{ipa_realm}}" \
                           --ip-address="{{inventory_ip}}" \
                           --auto-forwarders

But that fail it is wrote into the installation log this:

2022-04-27T16:14:01Z DEBUG args=['/usr/sbin/ipa-client-install', '--on-master', '--unattended', '--domain', 'msio.test', '--server', 'ipa.msio.test', '--realm', 'MSIO.TEST', '--hostname', 'ipa.msio.test'
, '--no-ntp', '--ssh-trust-dns']
2022-04-27T16:14:04Z DEBUG Process finished, return code=1
2022-04-27T16:14:04Z DEBUG   File "/usr/lib/python3.6/site-packages/ipapython/admintool.py", line 180, in execute
    return_value = self.run()
  File "/usr/lib/python3.6/site-packages/ipapython/install/cli.py", line 342, in run
    return cfgr.run()
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 360, in run
    return self.execute()
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 386, in execute
    for rval in self._executor():
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 431, in __runner
    exc_handler(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
    self._handle_exception(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 421, in __runner
    step()
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 418, in <lambda>
    step = lambda: next(self.__gen)
  File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
    six.reraise(*exc_info)
  File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
    value = gen.send(prev_value)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 655, in _configure
    next(executor)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 431, in __runner
    exc_handler(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
    self._handle_exception(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 518, in _handle_exception
    self.__parent._handle_exception(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 515, in _handle_exception
    super(ComponentBase, self)._handle_exception(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value

  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 421, in __runner
    step()
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 418, in <lambda>
    step = lambda: next(self.__gen)
  File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
    six.reraise(*exc_info)
  File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
    value = gen.send(prev_value)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 655, in _configure
    next(executor)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 431, in __runner
    exc_handler(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
    self._handle_exception(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 518, in _handle_exception
    self.__parent._handle_exception(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 515, in _handle_exception
    super(ComponentBase, self)._handle_exception(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 421, in __runner
    step()
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 418, in <lambda>
    step = lambda: next(self.__gen)
  File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
    six.reraise(*exc_info)
  File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
    value = gen.send(prev_value)
  File "/usr/lib/python3.6/site-packages/ipapython/install/common.py", line 65, in _install
    for unused in self._installer(self.parent):
  File "/usr/lib/python3.6/site-packages/ipaserver/install/server/__init__.py", line 570, in main
    master_install(self)
  File "/usr/lib/python3.6/site-packages/ipaserver/install/server/install.py", line 275, in decorated
    func(installer)
  File "/usr/lib/python3.6/site-packages/ipaserver/install/server/install.py", line 1001, in install
    raise ScriptError("Configuration of client side components failed!")