It doesn't? What about https://github.com/freeipa/freeipa-container ?
My understanding is that it is an experimental implementation currently. FreeIPA does not necessarily work very well broken up into containers right now.
Yes, and running FreeIPA in a container requires the container to run as root, which is not allowed in our Openshift.