Editing Tornedo.tetrain.com Runbook (section)

=== 3.3 Run the replica install ===

<pre>
<nowiki>
kinit admin   # client-run, same rule as Phase 2.4
ipa-replica-install --setup-ca --skip-mem-check --unattended
</nowiki>
</pre>

<code><nowiki>--skip-mem-check</nowiki></code> is required here specifically because of the low-RAM box above — without it the installer refuses to proceed even with swap present.

If retrying after a failed attempt, clean up in this order (all recurring issues on this hop):

<pre>
<nowiki>
# 1. stale topology/master entry left by any attempt that got past "adding master entry"
#    before failing later — host-disable/host-mod CANNOT touch a master entry, must force-delete:
ipa server-del ipa.tetrain.com --force

# 2. kill orphaned processes from a failed uninstall (ipa-server-install --uninstall often
#    reports success without actually stopping these) — prefer stop+pkill over `disable` for
#    ad-hoc cleanup, since `disable` can remove the systemd .wants/ symlink directory as a side
#    effect and break the NEXT install attempt's symlink creation:
systemctl stop pki-tomcatd@pki-tomcat.service
pkill -9 ns-slapd
pkill -9 -f pki-tomcatd
ps aux | grep -E 'ns-slapd|pki-tomcatd'   # confirm actually gone before retrying
mkdir -p /etc/systemd/system/pki-tomcatd.target.wants/   # recreate if a `disable` removed it

ipa-server-install --uninstall -U
</nowiki>
</pre>

Immediately after a successful install:

<pre>
<nowiki>
ipa-server-upgrade
</nowiki>
</pre>