Issue
What were you trying to do that didn't work?
Nightly tests of the freeipa-container failed for the CentOS 9 Stream based image.
Please provide the package NVR for which bug is seen:
ipa-4.11.0-4.el9
pki-core-11.5.0-0.1.alpha4.el9
How reproducible:
Deteministic.
Steps to reproduce
In a checkout of the https://github.com/freeipa/freeipa-container repo, run
docker=podman tests/run-partial-tests.sh Dockerfile.centos-9-stream
Expected results
No errors, output ends with
OK tests/run-partial-tests.sh.
Actual results
Configuring ipa-custodia
[1/5]: Making sure custodia container exists
[2/5]: Generating ipa-custodia config file
[3/5]: Generating ipa-custodia keys
[4/5]: starting ipa-custodia
[5/5]: configuring ipa-custodia to start on boot
Done configuring ipa-custodia.
Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
[1/30]: configuring certificate server instance
Failed to configure CA instance
See the installation logs and the following files/directories for more information:
/var/log/pki/pki-tomcat
[error] RuntimeError: CA configuration failed.
CA configuration failed.
The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
