On Wed, May 5, 2021 at 8:06 PM Alexander Bokovoy <abokovoy(a)redhat.com>
wrote:
On ke, 05 touko 2021, Florence Renaud wrote:
>Hi all,
>
>Stanislav, thanks for your investigation. Could you do a separate PR with
>the commit azure: Re-group test envs
><
https://github.com/freeipa/freeipa/pull/5656/commits/3f0308c275fc07a1cec8...
>
>(it would unblock our other PRs without waiting for your PR 5656
><https://github.com/freeipa/freeipa/pull/5656> to be reviewed)?
>
>On my side I investigated the "java.net.BindException: Address already in
>use" exception and I suspect it's related to the way we setup /etc/hosts
on
>the machines. Since commit 1906afb
><
https://github.com/dogtagpki/pki/commit/1906afbeb3c8b7140601be7f9bee2f7fe...
>,
>pki defines 2 AJP connectors, one using localhost4 and the other
localhost6
>but our /etc/hosts defines only localhost. I created a PR to check if the
>exception goes away with a proper /etc/hosts configuration (PR 5749
><https://github.com/freeipa/freeipa/pull/5749>).
>So the action plan would be:
>1. fix azure pipelines with Stanislav's PR
>2. fix the "Address already in use" with my PR
>3. make the same modification to /etc/hosts in freeipa-pr-ci
><
https://github.com/flo-renaud/freeipa-pr-ci/commit/78e949ccc0194c7c4cea64...
>,
>so that the tests running in PRCI also have localhost4 and localhost6
>defined
>
>How does it sound?
I would prefer if we simply redefine
pki_ajp_host_ipv4=localhost4
pki_ajp_host_ipv6=localhost6
in IPA CA configuration template to be 127.0.0.1 and ::1
As shown in
https://github.com/freeipa/freeipa-container/issues/385#issuecomment-8175...
,
this solves the problem for freeipa-container and should really be a
default on our side.
Ok, thanks for the suggestion, I updated my PR with the proposal.
>flo
>
>
>On Tue, May 4, 2021 at 8:38 PM Stanislav Levin via FreeIPA-devel <
>freeipa-devel(a)lists.fedorahosted.org> wrote:
>
>> The mentioned Java traceback is there even for OK cases.
>>
>> Unfortunately, I don't know the exact reason right now.
>> It may be related to the region of Azure hosting and for example,
>> countermeasures for mining through GH Actions(performance downgrade). I
>> run exactly the same CI on my account without failures:
>>
>>
https://dev.azure.com/slev0538/slev_/_build/results?buildId=101&view=...
>>
>>
https://dev.azure.com/slev0538/slev_/_build/results?buildId=100&view=...
>>
>> Workaround:
>> if test env's memory limit(sum of limits) doesn't exceed provided by
>> Azure VM(7Gb+4Gb swap), then tests are OK:
>>
>>
>>
https://github.com/freeipa/freeipa/pull/5656/commits/3f0308c275fc07a1cec8...
>>
>>
>>
https://dev.azure.com/freeipa/freeipa/_build/results?buildId=8780&vie...
>>
>> _______________________________________________
>> FreeIPA-devel mailing list -- freeipa-devel(a)lists.fedorahosted.org
>> To unsubscribe send an email to
freeipa-devel-leave(a)lists.fedorahosted.org
>> Fedora Code of Conduct:
>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
>>
https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedoraho...
>> Do not reply to spam on the list, report it:
>>
https://pagure.io/fedora-infrastructure
>>
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland