-
Bug
-
Resolution: Won't Do
-
Undefined
-
rhel-9.5
-
None
-
Yes
-
None
-
rhel-idm-ds
-
ssg_idm
-
0
-
False
-
False
-
-
None
-
None
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
None
What were you trying to do that didn't work?
I try to debug upgrade issue for the https://github.com/freeipa/freeipa-container. In an attempt to minimize the setup as much as possible, I tried to take RHEL 9.2, install and configure IdM, and upgrade it to the latest version.
In RHEL-85489 we clarified that the supported path should upgrade through all the minor RHEL versions, which I did here.
What is the impact of this issue to you?
It slows my investigation of the FreeIPA upgrade issue.
Please provide the package NVR for which the bug is seen:
ipa-server-4.12.2-1.el9_5.4.x86_64
How reproducible is this bug?:
Deterministic.
Steps to reproduce
- Create a VM using rhel-9.2-x86_64-kvm.qcow2.
- Log in as root.
- subscription-manager register
- subscription-manager release --set 9.2
- dnf install -y ipa-server
- Observe that ipa-server 4.10.1-9.el9_2 was installed.
- ipa-server-install -U -r EXAMPLE.TEST -a Secret123 -p Secret123 --no-ntp
- seq 9.3 0.1 9.5 | while read i ; do subscription-manager release --set $i && dnf clean all && dnf upgrade -y && ls -la /var/log/ipaupgrade.log && tail /var/log/ipaupgrade.log ; done
Expected results
The IdM installation upgraded up to RHEL 9.5. Upon each upgrade, ipa-server-upgrade run automatically.
Actual results
The dnf transaction upgrading to RHEL 9.5 hangs at
Running scriptlet: ipa-selinux-4.12.2-1.el9_5.4.noarch 681/681 Running scriptlet: kernel-modules-core-5.14.0-503.34.1.el9_5.x86_64 681/681 Running scriptlet: kernel-core-5.14.0-503.34.1.el9_5.x86_64 681/681 Running scriptlet: kernel-modules-5.14.0-503.34.1.el9_5.x86_64 681/681 Running scriptlet: kexec-tools-2.0.27-16.el9_5.1.x86_64 681/681 Running scriptlet: sssd-common-2.9.5-4.el9_5.4.x86_64 681/681 Running scriptlet: subscription-manager-1.29.42-1.el9.x86_64 681/681 Running scriptlet: httpd-2.4.62-1.el9_5.2.x86_64 681/681 Running scriptlet: ipa-server-4.12.2-1.el9_5.4.x86_64 681/681
After two hours, this is still the last line on the terminal.
When I check /var/log/ipaupgrade.log from another terminal, it ends with
2025-03-31T18:33:44Z DEBUG step duration: dirsrv __save_config 0.03 sec 2025-03-31T18:33:44Z DEBUG [2/9]: disabling listeners 2025-03-31T18:33:44Z DEBUG step duration: dirsrv __disable_listeners 0.03 sec 2025-03-31T18:33:44Z DEBUG [3/9]: enabling DS global lock 2025-03-31T18:33:44Z DEBUG step duration: dirsrv __enable_ds_global_write_lock 0.03 sec 2025-03-31T18:33:44Z DEBUG [4/9]: disabling Schema Compat 2025-03-31T18:33:44Z DEBUG step duration: dirsrv __disable_schema_compat 0.04 sec 2025-03-31T18:33:44Z DEBUG [5/9]: starting directory server 2025-03-31T18:33:44Z DEBUG Starting external process 2025-03-31T18:33:44Z DEBUG args=['/bin/systemctl', 'start', 'dirsrv@EXAMPLE-TEST.service']
There is nothing visibly consuming CPU in that VM, things are just stuck.
