Tomasz Torcz 👁️ via FreeIPA-users wrote:
On Fri, Apr 20, 2018 at 05:30:30PM +0100, lejeczek via FreeIPA-users
> I'm thinking of moving IPAs into a LXC containers, with networks, etc.. so
> the actual hardware will only be clients to LXC IPAs...
> How do you guys normally do it?
IPA does no testing using LXC containers so YMMV.
Virtual machines are cheap so that is another option if you can't devote
iron to it.
I realize that resource utilization is a big concern but given the
importance of IPA to an infrastructure you really have to consider the
risk vs reward of adding more attack surface area.
I've tried few times, but there's a bug when 389-ds wants
obscene amount of gigabytes and fails:
This is fixed (and it is working for me.)