It is possibly the same thing we hit in Fedora 31 previously https://bugzilla.redhat.com/show_bug.cgi?id=1689975

Can you show output of 

 $ systemctl status kmod-static-nodes.service

And

 $ grep modules.devname /var/log/audit/audit.log

Thanks Daniel, here's the output of those commands:

$ systemctl status kmod-static-nodes.service
● kmod-static-nodes.service - Create list of required static device nodes for the current kernel
   Loaded: loaded (/usr/lib/systemd/system/kmod-static-nodes.service; static; vendor preset: disabled)
   Active: inactive (dead) since Wed 2019-04-17 11:53:22 IST; 1min 9s ago
Condition: start condition failed at Wed 2019-04-17 11:53:25 IST; 1min 6s ago
           └─ ConditionFileNotEmpty=/lib/modules/5.0.7-300.fc30.x86_64/modules.devname was not met
 Main PID: 308 (code=exited, status=0/SUCCESS)

Apr 17 11:53:22 localhost systemd[1]: kmod-static-nodes.service: Succeeded.
Apr 17 11:53:22 localhost systemd[1]: Stopped Create list of required static device nodes for the current kernel.
Apr 17 11:53:24 silverblue-t580 systemd[1]: Condition check resulted in Create list of required static device nodes for the current kernel being skipped.
Apr 17 11:53:24 silverblue-t580 systemd[1]: Condition check resulted in Create list of required static device nodes for the current kernel being skipped.
Apr 17 11:53:24 silverblue-t580 systemd[1]: Condition check resulted in Create list of required static device nodes for the current kernel being skipped.
Apr 17 11:53:24 silverblue-t580 systemd[1]: Condition check resulted in Create list of required static device nodes for the current kernel being skipped.
Apr 17 11:53:25 silverblue-t580 systemd[1]: Condition check resulted in Create list of required static device nodes for the current kernel being skipped.
Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable.

$ sudo grep modules.devname /var/log/audit/audit.log
type=AVC msg=audit(1555081047.583:118): avc:  denied  { getattr } for  pid=1 comm="systemd" path="/usr/lib/modules/5.0.6-300.fc30.x86_64/modules.devname" dev="dm-1" ino=2498251 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:modules_dep_t:s0 tclass=file permissive=0
type=AVC msg=audit(1555085454.794:124): avc:  denied  { getattr } for  pid=1 comm="systemd" path="/usr/lib/modules/5.0.6-300.fc30.x86_64/modules.devname" dev="dm-1" ino=2498251 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:modules_dep_t:s0 tclass=file permissive=0
type=AVC msg=audit(1555493651.483:118): avc:  denied  { getattr } for  pid=1 comm="systemd" path="/usr/lib/modules/5.0.7-300.fc30.x86_64/modules.devname" dev="dm-1" ino=2498251 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:modules_dep_t:s0 tclass=file permissive=0
type=AVC msg=audit(1555498405.149:116): avc:  denied  { getattr } for  pid=1 comm="systemd" path="/usr/lib/modules/5.0.7-300.fc30.x86_64/modules.devname" dev="dm-1" ino=2498251 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:modules_dep_t:s0 tclass=file permissive=0

Ok, that looks like the same bug then.  kmod-static-nodes.service is failing to start because systemd can't read /usr/lib/modules/5.0.6-300.fc30.x86_64/modules.devname due to SELinux AVC.

So looks like the flaw from rawhide was pulled into Fedora 30, and the fix was rawhide was missed.

SElinux policy in Fedora 30 will need the same fix from bug 1689975.

Since this has now moved to selinux-policy, in case it's useful the nvr of that that I've got installed is selinux-policy-3.14.3-29.fc30.noarch

Hi All, 

It should be fixed in this build:
https://koji.fedoraproject.org/koji/buildinfo?buildID=1248382 

Could you please test it? 

Thanks,
Lukas

selinux-policy-3.14.3-31.fc30 has been submitted as an update to Fedora 30. https://bodhi.fedoraproject.org/updates/FEDORA-2019-3055c546d6

selinux-policy-3.14.3-31.fc30 has been pushed to the Fedora 30 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-3055c546d6

selinux-policy-3.14.3-31.fc30 has been pushed to the Fedora 30 stable repository. If problems still persist, please make note of it in this bug report.

I never got around to testing the update when you asked, sorry about that Lukas!

The problem still exists for me on Fedora 30 Silverblue. Additionally, I also hit bug #1717405, which could be related given that it's also a kernel module that's not getting loaded when it's needed (and the fix for a seemingly similar issue in Rawhide was in the selinux-policy package also).

I see the following error message in dmesg output, which might be related:

[   24.813270] systemd[1]: Unable to fix SELinux security context of /run/tmpfiles.d/kmod.conf: Invalid argument

Also, in case it's useful:

$ cat /run/tmpfiles.d/kmod.conf
c! /dev/fuse 0600 - - - 10:229
c! /dev/btrfs-control 0600 - - - 10:234
c! /dev/loop-control 0600 - - - 10:237
c! /dev/uhid 0600 - - - 10:239
c! /dev/cuse 0600 - - - 10:203

Any ideas?

Hi Gerard, 

I push fixes for #1717405 and I think it will help also here. For now closing this ticket as duplicate, tomorrow I'll do new build so you can test it next week. 

Thanks,
Lukas.

*** This bug has been marked as a duplicate of bug 1717405 ***