Alexander Bokovoy

You need to install all packages as they have dependent requires. You can use 'dnf localinstall *.rpm' for that.

And there are no wrong python version requires, obviously.

Documentation for batch command: https://freeipa.readthedocs.io/en/latest/api/batch.html (not much, admittedly) Basic usage guide: https://freeipa.readthedocs.io/en/latest/api/basic_usage.html#id9

There is an update to bind to fix security issue that changes ABI and requires a corresponding bind-dyndb-ldap update. They have to be installed together.

They should be released in the dependant errata. This was tested and ensured in RHEL.

See https://access.redhat.com/solutions/7065748 Correct RHEL 9 versions: - `bind-9.16.23-14.el9_3.4` or newer - `bind-dyndb-ldap-11.9-8.el9_3.3` or newer

Note that versions are not enough. The packages had to be built in the this order as well. Eg first bind, then bind-dyndb-ldap against that bind build.

IPA does not support `python3-cryptography` versions coming outside of the main repository. PyCA does regularly extend their classes with new APIs and does it in a way that makes old...

I have the same problem if I'd run rhel-packager container on Silverblue system. Silverblue does have `/var/mnt` which is not a symlink but `/mnt` is already a symlink: ``` $...

We did discuss this with @debarshiray today. I strongly advise not to do user modification operations like `usermod` or `userdel` for this purpose. Instead, rely on a fact that `nss_systemd`...