{"action":"created","issue":{"url":"https://api.github.com/repos/adelton/docker-freeipa/issues/30","labels_url":"https://api.github.com/repos/adelton/docker-freeipa/issues/30/labels{/name}","comments_url":"https://api.github.com/repos/adelton/docker-freeipa/issues/30/comments","events_url":"https://api.github.com/repos/adelton/docker-freeipa/issues/30/events","html_url":"https://github.com/adelton/docker-freeipa/issues/30","id":93582906,"number":30,"title":"must disable DNS client to create the freeIPA container instance. ","user":{"login":"kforner","id":122744,"avatar_url":"https://avatars.githubusercontent.com/u/122744?v=3","gravatar_id":"","url":"https://api.github.com/users/kforner","html_url":"https://github.com/kforner","followers_url":"https://api.github.com/users/kforner/followers","following_url":"https://api.github.com/users/kforner/following{/other_user}","gists_url":"https://api.github.com/users/kforner/gists{/gist_id}","starred_url":"https://api.github.com/users/kforner/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kforner/subscriptions","organizations_url":"https://api.github.com/users/kforner/orgs","repos_url":"https://api.github.com/users/kforner/repos","events_url":"https://api.github.com/users/kforner/events{/privacy}","received_events_url":"https://api.github.com/users/kforner/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-07-07T17:20:07Z","updated_at":"2015-07-08T09:56:41Z","closed_at":null,"body":"In my setup, the DNS server running in the docker container is bound to the docker host throught port forwarding (-p). \r\nSo the docker host \"is\" the DNS server, and as such is client of itself (i.e. is in the /etc/resolv.conf).\r\nSo far so good, but in this setup, before creating the freeipa container instance, it seems that I must first disable the (local) DNS nameserver in  /etc/resolv.conf, run the freeipa container, then reenable the DNS in /etc/resolv.conf, otherwise I get errors:\r\n```\r\nWarning: skipping DNS resolution of host ipa.quartzbio.com\r\nThe domain name has been determined based on the host name.\r\n\r\nChecking forwarders, please wait ...\r\nipa         : ERROR    Forwarder 10.9.70.3 does not work\r\nForwarder 10.9.70.3 does not respond\r\nFreeIPA server configuration failed.\r\n```\r\nwhere 10.9.70.3 is the IP address of the docker host\r\n\r\nMy question: is there a way to be able to start the freeipa without having to mess with the host setup ?\r\n\r\nRegards, and many thanks for the docker !!\r\n\r\nP.S\r\ncurrent docker run command (I tried many variants):\r\n```\r\neval \"PASSWORD_VALUE=\\${IPA_PASSWORD}\" && \\\r\n\tdocker run --name freeipa -t -d \\\r\n\t-e IPA_SERVER_IP=10.9.70.3 \\\r\n\t-e IPA_SERVER_INSTALL_OPTS=\"--no-host-dns --forwarder=8.8.8.8 -N\" \\\r\n\t-h ipa.quartzbio.com \\\r\n\t-e PASSWORD=$PASSWORD_VALUE \\\r\n\t-v /secure/freeipa_server/freeipa/data:/data \\\r\n\t-v /etc/localtime:/etc/localtime:ro \\\r\n\t-p 53:53  -p 53:53/udp \\\r\n\t-p 9980:80 -p 9943:443 \\\r\n\t-p 389:389 -p 636:636 -p 88:88 -p 464:464 \\\r\n\t-p 88:88/udp -p 464:464/udp -p 7389:7389 \\\r\n\t-p 9443:9443 -p 9444:9444 -p 9445:9445  adelton/freeipa-server\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/adelton/docker-freeipa/issues/comments/119528460","html_url":"https://github.com/adelton/docker-freeipa/issues/30#issuecomment-119528460","issue_url":"https://api.github.com/repos/adelton/docker-freeipa/issues/30","id":119528460,"user":{"login":"adelton","id":2536912,"avatar_url":"https://avatars.githubusercontent.com/u/2536912?v=3","gravatar_id":"","url":"https://api.github.com/users/adelton","html_url":"https://github.com/adelton","followers_url":"https://api.github.com/users/adelton/followers","following_url":"https://api.github.com/users/adelton/following{/other_user}","gists_url":"https://api.github.com/users/adelton/gists{/gist_id}","starred_url":"https://api.github.com/users/adelton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adelton/subscriptions","organizations_url":"https://api.github.com/users/adelton/orgs","repos_url":"https://api.github.com/users/adelton/repos","events_url":"https://api.github.com/users/adelton/events{/privacy}","received_events_url":"https://api.github.com/users/adelton/received_events","type":"User","site_admin":false},"created_at":"2015-07-08T09:56:41Z","updated_at":"2015-07-08T09:56:41Z","body":"> The problem is that you can not easily restart the freeipa container/service if it is down.\r\n\r\nCan you elaborate? What prevents you from just starting it / running new container?\r\n\r\n> You have to setup a proces: first remove dns, start or restart freeipa, restore dns\r\n\r\nThe FreeIPA container internally uses 127.0.0.1 in its `resolv.conf`. Only during the initial, setup stage, the values from host's `resolv.conf` are used for forwarders. But for restarting the container, you don't need to change the anything, if by \"remove dns\" you mean removing `nameserver` line from host's `resolv.conf`."}}