Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1370561 - selinux-policy-targeted-3.13.1-211.fc26 breaks rawhide composes
Summary: selinux-policy-targeted-3.13.1-211.fc26 breaks rawhide composes
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 26
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Lukas Vrabec
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: AcceptedBlocker
Depends On:
Blocks: F26AlphaBlocker
TreeView+ depends on / blocked
 
Reported: 2016-08-26 15:22 UTC by Kevin Fenzi
Modified: 2017-03-02 23:45 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-03-02 23:45:37 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Kevin Fenzi 2016-08-26 15:22:04 UTC
Todays rawhide compose failed to build install images at: 

DEBUG util.py:421:  2016-08-26 06:40:33,675: creating the runtime image
DEBUG util.py:421:  creating the runtime image
DEBUG util.py:421:  Traceback (most recent call last):
DEBUG util.py:421:    File "/usr/sbin/lorax", line 273, in <module>
DEBUG util.py:421:      main()
DEBUG util.py:421:    File "/usr/sbin/lorax", line 133, in main
DEBUG util.py:421:      remove_temp=True, verify=opts.verify)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/__init__.py", line 327, in run
DEBUG util.py:421:      size=size)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/treebuilder.py", line 221, in create_runtime
DEBUG util.py:421:      "Anaconda", size=size)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/imgutils.py", line 120, in mkrootfsimg
DEBUG util.py:421:      runcmd(cmd, root=root)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/executils.py", line 341, in runcmd
DEBUG util.py:421:      return execWithRedirect(cmd[0], cmd[1:], **kwargs)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/executils.py", line 228, in execWithRedirect
DEBUG util.py:421:      env_add=env_add, reset_handlers=reset_handlers, reset_lang=reset_lang)[0]
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/executils.py", line 201, in _run_program
DEBUG util.py:421:      raise subprocess.CalledProcessError(proc.returncode, argv, output)
DEBUG util.py:421:  subprocess.CalledProcessError: Command '['setfiles', '-e', '/proc', '-e', '/sys', '-e', '/dev', '-e', '/install', '/etc/selinux/targeted/contexts/files/file_contexts', '/']' returned non-zero exit status 1
DEBUG util.py:546:  Child return code was: 1

and running that on my rawhide laptop gives: 

/etc/selinux/targeted/contexts/files/file_contexts: Multiple different specifications for /var/lib/kubelet(/.*)?  (system_u:object_r:svirt_sandbox_file_t:s0 and system_u:object_r:docker_var_lib_t:s0).
/etc/selinux/targeted/contexts/files/file_contexts: Invalid argument

Looks like a duplicate definition there between selinux-policy and docker-selinux.

Comment 1 Adam Williamson 2016-09-01 18:07:06 UTC
This is an automatic blocker for F26 Alpha: " Bugs which entirely prevent the composition of one or more of the release-blocking images required to be built for a currently-pending (pre-)release " - it breaks the entire compose process. https://fedoraproject.org/wiki/QA:SOP_blocker_bug_process#Automatic_blockers

Comment 2 Kevin Fenzi 2016-09-01 20:41:37 UTC
Note since this causes rawhide composes to fail, I untagged the initial broken one, and just now untagged the newer broken one. 

Tue Aug 23 05:33:40 2016: selinux-policy-3.13.1-210.fc26 tagged into f26 by lvrabec [still active]
Thu Aug 25 06:50:08 2016: selinux-policy-3.13.1-211.fc26 tagged into f26 by lvrabec
Fri Aug 26 11:32:57 2016: selinux-policy-3.13.1-211.fc26 untagged from f26 by kevin
Wed Aug 31 04:29:05 2016: selinux-policy-3.13.1-212.fc26 tagged into f26 by lvrabec
Thu Sep  1 14:40:57 2016: selinux-policy-3.13.1-212.fc26 untagged from f26 by kevin

Comment 3 Alexander Bokovoy 2016-09-03 22:11:48 UTC
The same happens when upgrading to Fedora 25:
  Upgrading   : selinux-policy-devel-3.13.1-211.fc25.noarch                                                                                                         619/2488 
  Upgrading   : docker-selinux-2:1.12.1-9.git2649fe1.fc25.x86_64                                                                                                    620/2488 
/etc/selinux/targeted/contexts/files/file_contexts: Multiple different specifications for /var/lib/kubelet(/.*)?  (system_u:object_r:svirt_sandbox_file_t:s0 and system_u:object_r:docker_var_lib_t:s0).
/etc/selinux/targeted/contexts/files/file_contexts: Invalid argument
libsemanage.semanage_install_final_tmp: setfiles returned error code 1. (No such file or directory).
/etc/selinux/targeted/contexts/files/file_contexts: Multiple different specifications for /var/lib/kubelet(/.*)?  (system_u:object_r:svirt_sandbox_file_t:s0 and system_u:object_r:docker_var_lib_t:s0).
/etc/selinux/targeted/contexts/files/file_contexts: Invalid argument
libsemanage.semanage_install_final_tmp: setfiles returned error code 1. (No such file or directory).
/usr/sbin/semodule:  Failed!

Comment 4 Adam Williamson 2016-09-13 23:53:09 UTC
Lukas says he thinks this scratch build should not have the problem:

http://koji.fedoraproject.org/koji/taskinfo?taskID=15543141

is it possible we can run a test compose with that to check, before he does an official build?

Comment 5 Lukas Vrabec 2016-09-15 16:01:45 UTC
I tested it today, together with the latest docker-selinux rpm package it's working.

Comment 6 Kevin Fenzi 2016-09-15 16:04:53 UTC
Thank you.

Comment 7 Fedora End Of Life 2017-02-28 10:09:45 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 26 development cycle.
Changing version to '26'.

Comment 8 Adam Williamson 2017-03-02 23:45:37 UTC
This was clearly resolved some time ago.


Note You need to log in before you can comment on or make changes to this bug.