IPA broken after dnf update on CentOS 8

[Vinícius Ferrão]

Hello, I’ve a single IPA machine that provides authentication for itself. It does not even
have any client or host.

After def -y update and reboot, IPA fails to load an it’s in broken state.

[root@headnode ~]# systemctl status ipa
● ipa.service - Identity, Policy, Audit
   Loaded: loaded (/usr/lib/systemd/system/ipa.service; enabled; vendor preset:
disabled)
   Active: failed (Result: exit-code) since Wed 2021-01-06 16:14:48 -03; 45min ago
  Process: 1278 ExecStart=/usr/sbin/ipactl start (code=exited, status=1/FAILURE)
 Main PID: 1278 (code=exited, status=1/FAILURE)

Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: CRL tree already moved
Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: IPA server upgrade failed:
Inspect /var/log/ipaupgrade.log and run command i>
Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: Unexpected error - see
/var/log/ipaupgrade.log for details:
Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: CalledProcessError:
CalledProcessError(Command ['/bin/systemctl', 'start', '>
Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: The ipa-server-upgrade
command failed. See /var/log/ipaupgrade.log for more >
Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: See the upgrade log for more
details and/or run /usr/sbin/ipa-server-upgrade>
Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br ipactl[1278]: Aborting ipactl
Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br systemd[1]: ipa.service: Main process
exited, code=exited, status=1/FAILURE
Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br systemd[1]: ipa.service: Failed with
result 'exit-code'.
Jan 06 16:14:48 headnode.cluster.tmc.if.ufrj.br systemd[1]: Failed to start Identity,
Policy, Audit.

If asks for look on /var/log/ipaupgrade.log; but this log is just overwhelming. You must
know what you should be looking for for actually find something.

The relevant thing that I’ve found by myself is:
2021-01-06T19:09:51Z DEBUG The ipa-server-upgrade command failed, exception:
CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start',
'[e-mail]<mailto:[e-mail]>']
returned non-zero exit status 1: 'Job for
[e-mail]<mailto:[e-mail]> failed because
a timeout was exceeded.\nSee "systemctl status
[e-mail]<mailto:[e-mail]>" and
"journalctl -xe" for details.\n’)

Is that Java regression again that happened a month or two ago?

Thank you all.