Tomasz Torcz 👁️ via FreeIPA-users wrote:
On Fri, Apr 20, 2018 at 05:30:30PM +0100, lejeczek via FreeIPA-users
wrote:
> I'm thinking of moving IPAs into a LXC containers, with networks, etc.. so
> the actual hardware will only be clients to LXC IPAs...
> How do you guys normally do it?
IPA does no testing using LXC containers so YMMV.
Virtual machines are cheap so that is another option if you can't devote
iron to it.
I realize that resource utilization is a big concern but given the
importance of IPA to an infrastructure you really have to consider the
risk vs reward of adding more attack surface area.
I've tried few times, but there's a bug when 389-ds wants
to allocate
obscene amount of gigabytes and fails:
https://pagure.io/389-ds-base/issue/49178
This is fixed (and it is working for me.)
rob