On Аўт, 24 чэр 2025, Tomasz Torcz wrote:
On Tue, Jun 24, 2025 at 02:03:09PM +0300, Alexander Bokovoy wrote:
On Аўт, 24 чэр 2025, Tomasz Torcz wrote:
> On Tue, Jun 24, 2025 at 10:40:55AM +0100, Aoife Moloney via devel-announce
wrote:
> > == Upgrade/compatibility impact ==
> > * Directory server instances already using lmdb as database are not
> > impacted. (typically those created with Fedora 40 and after)
> > * freeipa is not impacted because it already uses lmdb since Fedora 40
>
> Some FreeIPA installations (like mine) were created long before F40
> and upgraded over the years.
Yes, you need to follow major RHEL IdM upgrade procedure that all RHEL
users follow for ~15 years now.
RHEL IdM documentation for RHEL9 to RHEL10 migration:
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html-single/migrating_to_identity_management_on_rhel_10/index#migrating_idm_from_rhel_9_to_rhel_10
I never read RHEL migration procedure and never intended to.
This is Fedora we are talking about. And Fedora users.
RHEL IdM documentation is the upstream FreeIPA documentation. If you
don't use it, you are losing a lot. This is explicitly stated in
https://www.freeipa.org/page/Documentation.html#user-guides
We have contemplated for years to apply the same upgrade requirements to
Fedora as in RHEL IdM already. The database format change is the hard
change that warrants it.
> > == User Experience ==
> > Directory server instances created since Fedora 40 and using the
> > default lmdb database are not impacted (that is typically the case for
> > freeipa users).
>
> Arguable.
We have not detected any problems with lmdb use in past several years in
upstream CI and in Fedora OpenQA test runs for FreeIPA environments.
Neither of those test FreeIPA installations upgraded over the years.
They only test fresh installations.
OpenQA tests for FreeIPA do test upgrades from Fedora N-1 to Fedora N.
This means they are testing already direct update and they will notice
Fedora 43 removal of bdb backend. We will need to put an upgrade
procedure in the tests.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
--
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
