[INFO ] Executing command 'astra-freeipa-server' in directory '/root'
[ERROR ] Command 'astra-freeipa-server' failed with return code: 1
[ERROR ] stdout: Предупреждение: Указан ключ --dogtag, однако на компьютере недостаточно ресурсов для нормальной работы DogTag: установлено менее 4GB ОЗУ
Предупреждение: Указан ключ --dogtag, однако на компьютере недостаточно ресурсов для нормальной работы DogTag: установлено менее 4 CPU
На компьютере недостаточно ресурсов для нормальной работы DogTag.
compname= dc-1
domain= ald.test.lab
Для управления сертификатами будет использован DogTag
Будет использован указанный IP-адрес 172.31.32.12.
service up
* Applying /etc/sysctl.d/30-postgresql-shm.conf ...
* Applying /usr/lib/sysctl.d/70-dirsrv.conf ...
vm.swappiness = 20
net.ipv4.tcp_slow_start_after_idle = 0
net.ipv4.tcp_fastopen = 1027
net.ipv4.tcp_max_tw_buckets = 262144
net.ipv4.tcp_max_syn_backlog = 4096
net.core.default_qdisc = fq_codel
* Applying /etc/sysctl.d/99-sysctl.conf ...
* Applying /etc/sysctl.d/999-astra.conf ...
kernel.sysrq = 0
fs.suid_dumpable = 0
kernel.randomize_va_space = 2
net.ipv4.tcp_timestamps = 0
* Applying /etc/sysctl.d/999-cve-2019-14899.conf ...
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
* Applying /etc/sysctl.d/protect-links.conf ...
fs.protected_hardlinks = 1
fs.protected_symlinks = 1
* Applying /etc/sysctl.conf ...
неудача. подробнее можно узнать в файле: /var/log/ipaserver-install.log
[ERROR ] stderr: Less than the minimum 1.2GB of RAM is available, 0.40GB available
The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
[ERROR ] retcode: 1
[INFO ] {'new': {'pid': 17291, 'retcode': 1, 'stdout': 'Предупреждение: Указан ключ --dogtag, однако на компьютере недостаточно ресурсов для нормальной работы DogTag: установлено менее 4GB ОЗУ\nПредупреждение: Указан ключ --dogtag, однако на компьютере недостаточно ресурсов для нормальной работы DogTag: установлено менее 4 CPU\nНа компьютере недостаточно ресурсов для нормальной работы DogTag.\ncompname= dc-1\ndomain= ald.test.lab\nДля управления сертификатами будет использован DogTag\nБудет использован указанный IP-адрес 172.31.32.12.\nservice up\n* Applying /etc/sysctl.d/30-postgresql-shm.conf ...\n* Applying /usr/lib/sysctl.d/70-dirsrv.conf ...\nvm.swappiness = 20\nnet.ipv4.tcp_slow_start_after_idle = 0\nnet.ipv4.tcp_fastopen = 1027\nnet.ipv4.tcp_max_tw_buckets = 262144\nnet.ipv4.tcp_max_syn_backlog = 4096\nnet.core.default_qdisc = fq_codel\n* Applying /etc/sysctl.d/99-sysctl.conf ...\n* Applying /etc/sysctl.d/999-astra.conf ...\nkernel.sysrq = 0\nfs.suid_dumpable = 0\nkernel.randomize_va_space = 2\nnet.ipv4.tcp_timestamps = 0\n* Applying /etc/sysctl.d/999-cve-2019-14899.conf ...\nnet.ipv4.conf.default.rp_filter = 1\nnet.ipv4.conf.all.rp_filter = 1\n* Applying /etc/sysctl.d/protect-links.conf ...\nfs.protected_hardlinks = 1\nfs.protected_symlinks = 1\n* Applying /etc/sysctl.conf ...\nнеудача. подробнее можно узнать в файле: /var/log/ipaserver-install.log', 'stderr': 'Less than the minimum 1.2GB of RAM is available, 0.40GB available\nThe ipa-server-install command failed. See /var/log/ipaserver-install.log for more information'}}
[INFO ] Completed state [configure_astra_freeipa_server] at time 19:39:18.941569 (duration_in_ms=3642.65)
[INFO ] Running state [/usr/sbin/ipa-server-upgrade] at time 19:39:18.941975
[INFO ] Executing state cmd.run for [/usr/sbin/ipa-server-upgrade]
[INFO ] Executing command '/usr/sbin/ipa-server-upgrade' in directory '/root'
[ERROR ] Command '/usr/sbin/ipa-server-upgrade' failed with return code: 2
[ERROR ] stderr: IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.
IPA is not configured on this system.
The ipa-server-upgrade command failed.
[ERROR ] retcode: 2
[ERROR ] {'pid': 17398, 'retcode': 2, 'stdout': '', 'stderr': 'IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually.\nIPA is not configured on this system.\nThe ipa-server-upgrade command failed.'}
[INFO ] Completed state [/usr/sbin/ipa-server-upgrade] at time 19:39:20.615472 (duration_in_ms=1673.494)
[INFO ] Running state [ipa_restart] at time 19:39:20.622263
[INFO ] Executing state module.run for [ipa_restart]
[INFO ] Executing command systemctl in directory '/root'
[INFO ] Executing command systemd-run in directory '/root'
[ERROR ] Command 'systemd-run' failed with return code: 1
[ERROR ] stderr: Running scope as unit: run-r53a17b47ff544d8b953fea19c37b2487.scope
Job for ipa.service failed because the control process exited with error code.
See "systemctl status ipa.service" and "journalctl -xe" for details.
[ERROR ] retcode: 1
[ERROR ] An exception occurred in this state: Traceback (most recent call last):
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/state.py", line 2277, in call
*cdata["args"], **cdata["kwargs"]
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/loader/lazy.py", line 149, in __call__
return self.loader.run(run_func, *args, **kwargs)
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/loader/lazy.py", line 1228, in run
return self._last_context.run(self._run_as, _func_or_method, *args, **kwargs)
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/loader/lazy.py", line 1243, in _run_as
return _func_or_method(*args, **kwargs)
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/loader/lazy.py", line 1276, in wrapper
return f(*args, **kwargs)
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/states/module.py", line 394, in run
return _run(**kwargs)
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/states/module.py", line 450, in _run
_func, returner=kwargs.get("returner"), func_args=kwargs.get(func)
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/states/module.py", line 495, in _call_function
mret = salt.utils.functools.call_function(__salt__[name], *func_args, **func_kwargs)
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/utils/functools.py", line 174, in call_function
return salt_function(*function_args, **function_kwargs)
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/loader/lazy.py", line 149, in __call__
return self.loader.run(run_func, *args, **kwargs)
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/loader/lazy.py", line 1228, in run
return self._last_context.run(self._run_as, _func_or_method, *args, **kwargs)
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/loader/lazy.py", line 1243, in _run_as
return _func_or_method(*args, **kwargs)
File "/opt/rbta/venvs/aldpro-common/lib/python3.7/site-packages/salt/modules/systemd_service.py", line 964, in restart
raise CommandExecutionError(_strip_scope(ret["stderr"]))
salt.exceptions.CommandExecutionError: Job for ipa.service failed because the control process exited with error code.
See "systemctl status ipa.service" and "journalctl -xe" for details.
[INFO ] Completed state [ipa_restart] at time 19:39:21.158626 (duration_in_ms=536.361)
[INFO ] Running state [add_class_rbta-unit] at time 19:39:21.161898
[INFO ] Executing state freeipa_api.config_mod for [add_class_rbta-unit]
[INFO ] Executing command 'klist' in directory '/root'
[INFO ] Executing command 'echo' in directory '/root'
[ERROR ] Command 'echo' failed with return code: 1
[ERROR ] stderr: kinit: Cannot find KDC for realm "ALD.TEST.LAB" while getting initial credentials
[ERROR ] retcode: 1
[ERROR ] Билет KRB не получен
[INFO ] Completed state [add_class_rbta-unit] at time 19:39:21.451008 (duration_in_ms=289.106)
[INFO ] Running state [add_class_rbta-address] at time 19:39:21.451448
[INFO ] Executing state freeipa_api.config_mod for [add_class_rbta-address]
[INFO ] Executing command 'klist' in directory '/root'
[INFO ] Executing command 'echo' in directory '/root'
[ERROR ] Command 'echo' failed with return code: 1
[ERROR ] stderr: kinit: Cannot find KDC for realm "ALD.TEST.LAB" while getting initial credentials
[ERROR ] retcode: 1
[ERROR ] Билет KRB не получен
[INFO ] Completed state [add_class_rbta-address] at time 19:39:21.488186 (duration_in_ms=36.736)
[INFO ] Running state [add_class_rbtaCustomUserAttrs] at time 19:39:21.488621
[INFO ] Executing state freeipa_api.config_mod for [add_class_rbtaCustomUserAttrs]
[INFO ] Executing command 'klist' in directory '/root'
[INFO ] Executing command 'echo' in directory '/root'
[ERROR ] Command 'echo' failed with return code: 1
[ERROR ] stderr: kinit: Cannot find KDC for realm "ALD.TEST.LAB" while getting initial credentials
[ERROR ] retcode: 1
[ERROR ] Билет KRB не получен
[INFO ] Completed state [add_class_rbtaCustomUserAttrs] at time 19:39:21.525113 (duration_in_ms=36.489)
[INFO ] Running state [add_class_rbta-inetorgperson-ext] at time 19:39:21.525523
[INFO ] Executing state freeipa_api.config_mod for [add_class_rbta-inetorgperson-ext]
[INFO ] Executing command 'klist' in directory '/root'