# Freeipa ansible & ansible-core version 2.15

**URL:** <https://forums.rockylinux.org/t/freeipa-ansible-ansible-core-version-2-15/15900>\
**Category:** Rocky Linux Help & Support\
**Tags:** rocky-linux-9\
**Created:** [September 19, 2024, 4:03pm UTC](https://forums.rockylinux.org/t/freeipa-ansible-ansible-core-version-2-15/15900 "2024-09-19T16:03:41Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\
**Post date:** [September 19, 2024, 4:03pm UTC](https://forums.rockylinux.org/t/freeipa-ansible-ansible-core-version-2-15/15900/1 "2024-09-19T16:03:41Z")

</div>

Hi All,

I am trying to deploy FreeIPA with ansible but I get an warning stating ansible-core 2.15+ is required. I have ansible [core 2.14.14] installed since this is the default with Rocky 9.4.

How do I upgrade ansible-core to 2.15+ for compatibility with ansible\_freeipa?

Best regards,  
Greg

---

<div class="post-metadata">

**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\
**Post date:** [September 19, 2024, 5:08pm UTC](https://forums.rockylinux.org/t/freeipa-ansible-ansible-core-version-2-15/15900/2 "2024-09-19T17:08:27Z")

</div>

You unfortunately have to use pip.

```auto
# dnf install -y python3.12-pip-wheel
# pip3.12 install pipx>=1.5.0 --user
# pipx install ansible --python=python3.12 --include-deps --system-site-packages
# pipx ensurepath

```

Pipx will setup a venv for you. Highly recommend checking it out!

---

<div class="post-metadata">

**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\
**Post date:** [September 23, 2024, 8:54am UTC](https://forums.rockylinux.org/t/freeipa-ansible-ansible-core-version-2-15/15900/3 "2024-09-23T08:54:23Z")

</div>

Hi Louis,

Thank you so much, that worked great!

Best regards,  
Greg

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [September 23, 2024, 9:04am UTC](https://forums.rockylinux.org/t/freeipa-ansible-ansible-core-version-2-15/15900/4 "2024-09-23T09:04:16Z")

</div>

> [@label](#):
>
> Pipx will setup a venv for you. Highly recommend checking it out!

Nice. EPEL has pipx (for python3.9).

---

<div class="post-metadata">

**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\
**Post date:** [September 24, 2024, 12:36pm UTC](https://forums.rockylinux.org/t/freeipa-ansible-ansible-core-version-2-15/15900/5 "2024-09-24T12:36:07Z")

</div>

I have a single client out of a large number that always gives me this error even though the host is joined to the domain.

I run “ansible-playbook -v -i inventory/hosts playbooks/install-client.yml --ask-become-pass”

TASK [freeipa.ansible\_freeipa.ipaclient : Install - IPA client test] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
fatal: [uipaclientauto2-vm.fathom.xxx]: FAILED! =\> {“changed”: false, “msg”: “No module named ‘ipapython’”}

Do you have any idea why this occurs?

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [September 24, 2024, 12:58pm UTC](https://forums.rockylinux.org/t/freeipa-ansible-ansible-core-version-2-15/15900/6 "2024-09-24T12:58:51Z")

</div>

> [@NolteG](#):
>
> ipapython

`dnf provides */ipapython\*` states that el9 package python3-ipalib provides that Python3.9 module.

However, Ansible constructs tasks with Python (A) on the _control host_ and then executes them remotely on _managed hosts_ with some Python (B) therein. The B can be different in each managed host and different from A. The question is, is it control host or the managed host that has to have the ‘ipapython’? The “works on other clients” hints that the answer is probably “the client” (i.e. managed host).

Should a play first install packages that the later tasks (in the client) rely on? Logically, yes.

---

<div class="post-metadata">

**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\
**Post date:** [September 24, 2024, 1:15pm UTC](https://forums.rockylinux.org/t/freeipa-ansible-ansible-core-version-2-15/15900/7 "2024-09-24T13:15:10Z")

</div>

Yes this is a client. The client also has all the required packages and freeipa-client is working. I still get this error even though the client works. I have identical clients working so it’s not a real issue it only happens on this particular client even though its working the logs say the client install fails.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [November 23, 2024, 1:15pm UTC](https://forums.rockylinux.org/t/freeipa-ansible-ansible-core-version-2-15/15900/8 "2024-11-23T13:15:51Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
