On pe, 16 maalis 2018, Kat via FreeIPA-users wrote:
Hi
Any ideas - VirtualBox - Fedora 27 server 4 CPUs and 4G ram (started
at 2+2) and it STILL dies at trying to restart the CA and fails after
300.0s
I have systems smaller than this running FreeIPA, so I can't believe
it is a resource? Maybe a Fedora thing? Is there some way to increase
the timeout? It just seems crazy that I need to allocate so much of my
machine - I remember on older versions I ran it with 2 CPUs on 1G.
If CA does not
start after 300.0 chances are your VirtualBox setup does
not provide enough entropy to get randomness needed for generating
certificates and keys. No amount of memory and CPU would help with that.
See, for example,
https://www.virtualbox.org/ticket/11297
Unfortunately, virtualbox developers still did not add support for
virtio-rng unlike all others.
You can use something like haveged to improve entropy provided to VMs.
--
/ Alexander Bokovoy