Issue

The current https://pagure.io/freeipa/blob/master/f/doc/workshop/Vagrantfile ends with an OOM when setting up the CA.

Steps to Reproduce

1. sudo dnf install -y vagrant-libvirt vagrant-libvirt-doc
2. sudo gpasswd -a ${USER} libvirt
3. newgrp libvirt
4. systemctl restart libvirtd
5. vagrant box add freeipa/freeipa-workshop
6. vagrant up
7. vagrant ssh server
8. sudo ipa-server-install --no-host-dns --mkhomedir

Actual behavior

[16/28]: requesting RA certificate from CA
[error] RuntimeError: Certificate issuance failed (CA_UNREACHABLE: Error 7 connecting to http://server.ipademo.local:8080/ca/ee/ca//profileSubmit: Couldn't connect to server.)
Certificate issuance failed (CA_UNREACHABLE: Error 7 connecting to http://server.ipademo.local:8080/ca/ee/ca//profileSubmit: Couldn't connect to server.)
The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information

[server]$ sudo systemctl status pki-tomcatd@pki-tomcat.service
× pki-tomcatd@pki-tomcat.service - PKI Tomcat Server pki-tomcat
Loaded: loaded (/usr/lib/systemd/system/pki-tomcatd@.service; enabled; vendor preset: disabled)
Drop-In: /etc/systemd/system/pki-tomcatd@pki-tomcat.service.d
└─ipa.conf
Active: failed (Result: oom-kill) since Sat 2024-12-14 15:46:22 UTC; 3min 15s ago
Process: 5822 ExecStart=/usr/libexec/tomcat/server start (code=killed, signal=KILL)
Process: 6077 ExecStop=/usr/libexec/tomcat/server stop (code=exited, status=1/FAILURE)
Main PID: 5822 (code=killed, signal=KILL)
CPU: 8.175s

Dec 14 15:46:22 server.ipademo.local server[6077]: at org.apache.catalina.startup.Catalina.stopServer(Catalin>
Dec 14 15:46:22 server.ipademo.local server[6077]: at java.base/jdk.internal.reflect.NativeMethodAccessorImpl>
Dec 14 15:46:22 server.ipademo.local server[6077]: at java.base/jdk.internal.reflect.NativeMethodAccessorImpl>
Dec 14 15:46:22 server.ipademo.local server[6077]: at java.base/jdk.internal.reflect.DelegatingMethodAccessor>
Dec 14 15:46:22 server.ipademo.local server[6077]: at java.base/java.lang.reflect.Method.invoke(Method.java:5>
Dec 14 15:46:22 server.ipademo.local server[6077]: at org.apache.catalina.startup.Bootstrap.stopServer(Bootst>
Dec 14 15:46:22 server.ipademo.local server[6077]: at org.apache.catalina.startup.Bootstrap.main(Bootstrap.ja>
Dec 14 15:46:22 server.ipademo.local systemd[1]: pki-tomcatd@pki-tomcat.service: Control process exited, code=exited,>
Dec 14 15:46:22 server.ipademo.local systemd[1]: pki-tomcatd@pki-tomcat.service: Failed with result 'oom-kill'.
Dec 14 15:46:22 server.ipademo.local systemd[1]: pki-tomcatd@pki-tomcat.service: Consumed 8.175s CPU time

Expected behavior

Install completes and the workshop is functional.

Version/Release/Distribution

$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server

[server]$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server
freeipa-server-4.9.3-2.fc34.x86_64
freeipa-client-4.9.3-2.fc34.x86_64
package ipa-server is not installed
package ipa-client is not installed
389-ds-base-2.0.3-3.fc34.x86_64
pki-ca-10.10.5-6.fc34.noarch
krb5-server-1.19.1-3.fc34.x86_64

Additional info:

Add more RAM to the VMs allows the workshop to build.
Also... we really need to update the Fedora version for these boxes.