On Wed, May 5, 2021 at 8:06 PM Alexander Bokovoy <abokovoy@redhat.com> wrote:
On ke, 05 touko 2021, Florence Renaud wrote:
>Hi all,
>
>Stanislav, thanks for your investigation. Could you do a separate PR with
>the commit azure: Re-group test envs
><https://github.com/freeipa/freeipa/pull/5656/commits/3f0308c275fc07a1cec87f39e9f4bdefb7ffc011>
>(it would unblock our other PRs without waiting for your PR 5656
><https://github.com/freeipa/freeipa/pull/5656> to be reviewed)?
>
>On my side I investigated the "java.net.BindException: Address already in
>use" exception and I suspect it's related to the way we setup /etc/hosts on
>the machines. Since commit 1906afb
><https://github.com/dogtagpki/pki/commit/1906afbeb3c8b7140601be7f9bee2f7fef5b0a5e>,
>pki defines 2 AJP connectors, one using localhost4 and the other localhost6
>but our /etc/hosts defines only localhost. I created a PR to check if the
>exception goes away with a proper /etc/hosts configuration (PR 5749
><https://github.com/freeipa/freeipa/pull/5749>).
>So the action plan would be:
>1. fix azure pipelines with Stanislav's PR
>2. fix the "Address already in use" with my PR
>3. make the same modification to /etc/hosts in freeipa-pr-ci
><https://github.com/flo-renaud/freeipa-pr-ci/commit/78e949ccc0194c7c4cea64a917a6edba786ddd4a>,
>so that the tests running in PRCI also have localhost4 and localhost6
>defined
>
>How does it sound?

I would prefer if we simply redefine

pki_ajp_host_ipv4=localhost4
pki_ajp_host_ipv6=localhost6

in IPA CA configuration template to be 127.0.0.1 and ::1

As shown in
https://github.com/freeipa/freeipa-container/issues/385#issuecomment-817570702,
this solves the problem for freeipa-container and should really be a
default on our side.

Ok, thanks for the suggestion, I updated my PR with the proposal.
flo


>flo
>
>
>On Tue, May 4, 2021 at 8:38 PM Stanislav Levin via FreeIPA-devel <
>freeipa-devel@lists.fedorahosted.org> wrote:
>
>> The mentioned Java traceback is there even for OK cases.
>>
>> Unfortunately, I don't know the exact reason right now.
>> It may be related to the region of Azure hosting and for example,
>> countermeasures for mining through GH Actions(performance downgrade). I
>> run exactly the same CI on my account without failures:
>>
>> https://dev.azure.com/slev0538/slev_/_build/results?buildId=101&view=results
>>
>> https://dev.azure.com/slev0538/slev_/_build/results?buildId=100&view=results
>>
>> Workaround:
>> if test env's memory limit(sum of limits) doesn't exceed provided by
>> Azure VM(7Gb+4Gb swap), then tests are OK:
>>
>>
>> https://github.com/freeipa/freeipa/pull/5656/commits/3f0308c275fc07a1cec87f39e9f4bdefb7ffc011
>>
>>
>> https://dev.azure.com/freeipa/freeipa/_build/results?buildId=8780&view=results
>>
>> _______________________________________________
>> FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
>> To unsubscribe send an email to freeipa-devel-leave@lists.fedorahosted.org
>> Fedora Code of Conduct:
>> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
>> https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org
>> Do not reply to spam on the list, report it:
>> https://pagure.io/fedora-infrastructure
>>




--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland