freeipa/ipaplatform/base
Christian Heimes 3f9e23f125 Add ExecStartPost hook to wait for Dogtag PKI
Dogtag PKI typically takes around 10 seconds to start and respond to
requests. Dogtag uses a simple systemd service, which means systemd is
unable to detect when Dogtag is ready. Commands like ``systemctl start``
and ``systemctl restart`` don't block and wait until the CA is up. There
have been various workarounds in Dogtag and IPA.

Systemd has an ExecStartPost hook to run programs after the main service
is started. The post hook blocks systemctl start and restart until all
post hooks report ready, too. The new ipa-pki-wait-running script polls
on port 8080 and waits until the CA subsystem returns ``running``.

Related: https://pagure.io/freeipa/issue/7916
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2019-04-24 09:09:28 +02:00
..
__init__.py ipaplatform: Create separate module for platform files 2014-06-16 19:48:17 +02:00
constants.py ipa-replica-install --setup-adtrust: check for package ipa-server-trust-ad 2018-10-24 14:20:29 +02:00
paths.py Add ExecStartPost hook to wait for Dogtag PKI 2019-04-24 09:09:28 +02:00
services.py Use Network Manager to configure resolv.conf 2019-04-16 10:45:59 +02:00
tasks.py Use Network Manager to configure resolv.conf 2019-04-16 10:45:59 +02:00