https://github.com/freeipa/freeipa-container/blob/master/README
https://github.com/freeipa/freeipa-container#running-freeipa-server-container
https://hub.docker.com/r/freeipa/freeipa-server/
https://www.altlinux.org/FreeIPA/%D0%A3%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BA%D0%B0_%D1%81%D0%B5%D1%80%D0%B2%D0%B5%D1%80%D0%B0_FreeIPA
https://docs.altlinux.org/ru-RU/domain/10.2/html/freeipa/ch01s08.html
https://freeipa.readthedocs.io/en/latest/workshop/1-server-install.html

Docker run

docker run --name freeipa-server -ti \
-h ipa.workgroup.test --read-only \
--cgroupns=host -v /sys/fs/cgroup:/sys/fs/cgroup:rw \
--sysctl net.ipv6.conf.all.disable_ipv6=0 \
-v ~/volumes/freeipa/data:/data freeipa/freeipa-server:rocky-9 ipa-server-install --skip-mem-check

Docker compose (cgroups2, без DNS)

---
services:
  freeipa:
    image: freeipa/freeipa-server:rocky-9
    container_name: freeipa-server
    restart: unless-stopped
    ports:
      - 123:123/udp
      - 389:389
      - 443:443
      - 464:464
      - 464:464/udp
      - 636:636
      - 80:80
      - 88:88
      - 88:88/udp
    tty: true
    stdin_open: true
    cgroup: host
    environment:
      IPA_SERVER_HOSTNAME: ipa.workgroup.test
      IPA_SERVER_INSTALL_OPTS: "-n workgroup.test -r WORKGROUP.TEST --skip-mem-check -U"
      PASSWORD: "123456Qwerty"
      TZ: "Europe/Moscow"
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /sys/fs/cgroup:/sys/fs/cgroup:rw
      - ~/volumes/freeipa/data:/data
    sysctls:
      - net.ipv6.conf.all.disable_ipv6=0