Bug 1306489

Summary: Filesystem has a dependency on /bin/sh
Product: [Fedora] Fedora Reporter: Ian Wienand <iwienand>
Component: filesystemAssignee: Martin Osvald 🛹 <mosvald>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 37CC: mosvald, ovasik, pmatilai, vondruch, zbyszek
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: filesystem-3.18-1.fc36 filesystem-3.18-2.fc37 filesystem-3.18-2.fc36 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-08-09 13:34:47 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Ian Wienand 2016-02-11 01:21:30 UTC
I believe probably after [1] where a %posttrans section was added to fixup selinux permissions, filesystem has a dependency on /bin/sh (see, say, [2])

---
 Requires 	
 /bin/sh
 rpmlib(BuiltinLuaScripts) <= 4.2.2-1
 rpmlib(CompressedFileNames) <= 3.0.4-1
 rpmlib(FileDigests) <= 4.6.0-1
 rpmlib(PayloadFilesHavePrefix) <= 4.0-1
 rpmlib(PayloadIsXz) <= 5.2-1
 setup
---

This seems to be a bit of a circular dependency because as you can imagine bash->glibc->basesystem->filesystem 

Basically I have an empty chroot, I have "rpm --root" installed "fedora-release" into it, then I use "yum --installroot dnf" to install into the chroot.  This does correctly bundle up everything into a transaction, e.g.

---
2016-02-10 14:49:45,658 INFO nodepool.image.build.fedora-23: Transaction Test Succeeded
2016-02-10 14:49:45,659 INFO nodepool.image.build.fedora-23: Running Transaction
2016-02-10 14:49:45,660 INFO nodepool.image.build.fedora-23: ** Found 1 pre-existing rpmdb problem(s), 'yum check' output follows:
2016-02-10 14:49:45,661 INFO nodepool.image.build.fedora-23: fedora-release-23-1.noarch has missing requires of /bin/sh
2016-02-10 14:49:45,812 INFO nodepool.image.build.fedora-23: Installing : libgcc-5.3.1-2.fc23.x86_64                                 1/163
2016-02-10 14:49:46,000 INFO nodepool.image.build.fedora-23: Installing : setup-2.9.8-2.fc23.noarch                                  2/163
2016-02-10 14:49:46,191 INFO nodepool.image.build.fedora-23: Installing : filesystem-3.2-35.fc23.x86_64                              3/163
2016-02-10 14:49:46,192 INFO nodepool.image.build.fedora-23: warning: group mail does not exist - using root
2016-02-10 14:49:46,424 INFO nodepool.image.build.fedora-23: Installing : basesystem-11-1.fc23.noarch                                4/163
...
---

But the problem seems to be that I think yum creates a lock-file in the chroot's "/var/run/" and thus goes ahead and makes that directory.  Thus in the chroot image, "/var/run" is not a symlink back to "/run" which is incorrect in the final image.

So this is how I came to pre-doing a rpm install of setup/basesystem/filesystem, which lead me to this dependency issue

I can force it with --nodeps, but I'm wondering if there is a better way...

[1] http://pkgs.fedoraproject.org/cgit/rpms/filesystem.git/commit/?id=221011c16fd023a6a39c42909cc6880271feb119
[2] http://koji.fedoraproject.org/koji/rpminfo?rpmID=6751629

Comment 1 Ondrej Vasik 2016-06-30 05:19:43 UTC
Hmmms, of course, it can be easily rewritten to lua to prevent this hard dependency - otoh - when you don't have restorecon ( from policycoreutils ) in the transacation, it may break the resulting SELinux context of basic directories ( that's why I use posttrans scriptlet in filesystem - it installs too early). And obviously, I don't want to have dependency on policycoreutils there ;).

Comment 2 Fedora End Of Life 2016-11-24 15:30:00 UTC
This message is a reminder that Fedora 23 is nearing its end of life.
Approximately 4 (four) weeks from now Fedora will stop maintaining
and issuing updates for Fedora 23. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as EOL if it remains open with a Fedora  'version'
of '23'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 23 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 3 Fedora End Of Life 2017-02-28 09:54:03 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 26 development cycle.
Changing version to '26'.

Comment 4 Jan Kurik 2017-08-15 07:09:38 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 27 development cycle.
Changing version to '27'.

Comment 5 Ben Cotton 2018-11-27 18:37:31 UTC
This message is a reminder that Fedora 27 is nearing its end of life.
On 2018-Nov-30  Fedora will stop maintaining and issuing updates for
Fedora 27. It is Fedora's policy to close all bug reports from releases
that are no longer maintained. At that time this bug will be closed as
EOL if it remains open with a Fedora  'version' of '27'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 27 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 6 Ben Cotton 2019-02-19 17:11:33 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 30 development cycle.
Changing version to '30.

Comment 7 Vít Ondruch 2019-06-14 15:10:43 UTC
(In reply to Ondrej Vasik from comment #1)
> that's why I use posttrans scriptlet in filesystem - it
> installs too early

I wonder if the %posttrans is useful at all:

~~~
$ sudo rm -rf ~/filesystemtest/

$ mkdir -p ~/filesystemtest/{var/{run,lock},usr/lib/debug,sys,boot,proc,dev,media}

$ ls -lZ ~/filesystemtest/
total 28
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:51 boot
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:51 dev
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:51 media
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:51 proc
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:51 sys
drwxrwxr-x. 3 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:51 usr
drwxrwxr-x. 4 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:51 var

$ ls -lZ ~/filesystemtest/var
total 8
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:51 lock
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:51 run
~~~

I just created severa directories and went ahead with installation of filesystem:

~~~
$ sudo dnf --installroot ~/filesystemtest --releasever 31 --setopt=deltarpm=False --disableplugin=local --disableplugin=spacewalk install filesystem
Fedora - Rawhide - Developmental packages for  6.4 MB/s |  72 MB     00:11    
Dependencies resolved.
===============================================================================
 Package                  Arch      Version                   Repository  Size
===============================================================================
Installing:
 filesystem               x86_64    3.11-1.fc31               rawhide    1.1 M
Installing dependencies:
 basesystem               noarch    11-7.fc30                 rawhide    6.9 k
 bash                     x86_64    5.0.7-1.fc31              rawhide    1.6 M
 fedora-gpg-keys          noarch    31-0.2                    rawhide    102 k
 fedora-release           noarch    31-0.6                    rawhide     11 k
 fedora-release-common    noarch    31-0.6                    rawhide     19 k
 fedora-repos             noarch    31-0.2                    rawhide    9.2 k
 fedora-repos-rawhide     noarch    31-0.2                    rawhide    8.4 k
 glibc                    x86_64    2.29.9000-26.fc31         rawhide    3.6 M
 glibc-all-langpacks      x86_64    2.29.9000-26.fc31         rawhide     25 M
 glibc-common             x86_64    2.29.9000-26.fc31         rawhide    524 k
 libgcc                   x86_64    9.1.1-2.fc31              rawhide     91 k
 libselinux               x86_64    2.9-2.fc31                rawhide     84 k
 libsepol                 x86_64    2.9-1.fc31                rawhide    280 k
 ncurses-base             noarch    6.1-10.20180923.fc30      rawhide     59 k
 ncurses-libs             x86_64    6.1-10.20180923.fc30      rawhide    288 k
 pcre2                    x86_64    10.33-3.fc31              rawhide    252 k
 setup                    noarch    2.13.3-1.fc31             rawhide    149 k
 tzdata                   noarch    2019a-1.fc31              rawhide    425 k

Transaction Summary
===============================================================================
Install  19 Packages

Total download size: 34 M
Installed size: 246 M
Is this ok [y/N]: y
Downloading Packages:
(1/19): basesystem-11-7.fc30.noarch.rpm         35 kB/s | 6.9 kB     00:00    
(2/19): fedora-release-31-0.6.noarch.rpm       692 kB/s |  11 kB     00:00    
(3/19): fedora-release-common-31-0.6.noarch.rp 1.1 MB/s |  19 kB     00:00    
(4/19): fedora-gpg-keys-31-0.2.noarch.rpm      418 kB/s | 102 kB     00:00    
(5/19): fedora-repos-31-0.2.noarch.rpm         572 kB/s | 9.2 kB     00:00    
(6/19): fedora-repos-rawhide-31-0.2.noarch.rpm 361 kB/s | 8.4 kB     00:00    
(7/19): bash-5.0.7-1.fc31.x86_64.rpm           1.9 MB/s | 1.6 MB     00:00    
(8/19): filesystem-3.11-1.fc31.x86_64.rpm      1.7 MB/s | 1.1 MB     00:00    
(9/19): glibc-common-2.29.9000-26.fc31.x86_64. 1.4 MB/s | 524 kB     00:00    
(10/19): libgcc-9.1.1-2.fc31.x86_64.rpm        1.7 MB/s |  91 kB     00:00    
(11/19): libselinux-2.9-2.fc31.x86_64.rpm      1.7 MB/s |  84 kB     00:00    
(12/19): libsepol-2.9-1.fc31.x86_64.rpm        3.6 MB/s | 280 kB     00:00    
(13/19): ncurses-base-6.1-10.20180923.fc30.noa 1.5 MB/s |  59 kB     00:00    
(14/19): glibc-2.29.9000-26.fc31.x86_64.rpm    2.9 MB/s | 3.6 MB     00:01    
(15/19): ncurses-libs-6.1-10.20180923.fc30.x86 3.6 MB/s | 288 kB     00:00    
(16/19): pcre2-10.33-3.fc31.x86_64.rpm         5.8 MB/s | 252 kB     00:00    
(17/19): setup-2.13.3-1.fc31.noarch.rpm        2.8 MB/s | 149 kB     00:00    
(18/19): tzdata-2019a-1.fc31.noarch.rpm        5.4 MB/s | 425 kB     00:00    
(19/19): glibc-all-langpacks-2.29.9000-26.fc31  12 MB/s |  25 MB     00:02    
-------------------------------------------------------------------------------
Total                                          8.5 MB/s |  34 MB     00:03     
warning: /home/vondruch/filesystemtest/var/cache/dnf/rawhide-2d95c80a1fa0a67d/packages/basesystem-11-7.fc30.noarch.rpm: Header V3 RSA/SHA256 Signature, key ID 3c3359c4: NOKEY
Fedora - Rawhide - Developmental packages for  1.6 MB/s | 1.6 kB     00:00    
Importing GPG key 0x3C3359C4:
 Userid     : "Fedora (31) <fedora-31-primary>"
 Fingerprint: 7D22 D586 7F2A 4236 474B F7B8 50CB 390B 3C33 59C4
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-31-x86_64
Is this ok [y/N]: y
Key imported successfully
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Running scriptlet: filesystem-3.11-1.fc31.x86_64                         1/1 
  Preparing        :                                                       1/1 
  Installing       : tzdata-2019a-1.fc31.noarch                           1/19 
  Installing       : ncurses-base-6.1-10.20180923.fc30.noarch             2/19 
  Installing       : libgcc-9.1.1-2.fc31.x86_64                           3/19 
  Running scriptlet: libgcc-9.1.1-2.fc31.x86_64                           3/19 
  Installing       : fedora-gpg-keys-31-0.2.noarch                        4/19 
  Installing       : fedora-release-31-0.6.noarch                         5/19 
  Installing       : fedora-release-common-31-0.6.noarch                  6/19 
  Installing       : fedora-repos-rawhide-31-0.2.noarch                   7/19 
  Installing       : fedora-repos-31-0.2.noarch                           8/19 
  Installing       : setup-2.13.3-1.fc31.noarch                           9/19 
  Running scriptlet: setup-2.13.3-1.fc31.noarch                           9/19 
  Installing       : filesystem-3.11-1.fc31.x86_64                       10/19 
  Installing       : basesystem-11-7.fc30.noarch                         11/19 
  Installing       : pcre2-10.33-3.fc31.x86_64                           12/19 
  Installing       : libselinux-2.9-2.fc31.x86_64                        13/19 
  Installing       : ncurses-libs-6.1-10.20180923.fc30.x86_64            14/19 
  Installing       : glibc-all-langpacks-2.29.9000-26.fc31.x86_64        15/19 
  Installing       : glibc-common-2.29.9000-26.fc31.x86_64               16/19 
  Running scriptlet: glibc-2.29.9000-26.fc31.x86_64                      17/19 
  Installing       : glibc-2.29.9000-26.fc31.x86_64                      17/19 
  Running scriptlet: glibc-2.29.9000-26.fc31.x86_64                      17/19 
  Installing       : bash-5.0.7-1.fc31.x86_64                            18/19 
  Running scriptlet: bash-5.0.7-1.fc31.x86_64                            18/19 
  Installing       : libsepol-2.9-1.fc31.x86_64                          19/19 
  Running scriptlet: libsepol-2.9-1.fc31.x86_64                          19/19 
  Running scriptlet: filesystem-3.11-1.fc31.x86_64                       19/19 
  Running scriptlet: glibc-all-langpacks-2.29.9000-26.fc31.x86_64        19/19 
  Running scriptlet: glibc-common-2.29.9000-26.fc31.x86_64               19/19 
  Verifying        : basesystem-11-7.fc30.noarch                          1/19 
  Verifying        : bash-5.0.7-1.fc31.x86_64                             2/19 
  Verifying        : fedora-gpg-keys-31-0.2.noarch                        3/19 
  Verifying        : fedora-release-31-0.6.noarch                         4/19 
  Verifying        : fedora-release-common-31-0.6.noarch                  5/19 
  Verifying        : fedora-repos-31-0.2.noarch                           6/19 
  Verifying        : fedora-repos-rawhide-31-0.2.noarch                   7/19 
  Verifying        : filesystem-3.11-1.fc31.x86_64                        8/19 
  Verifying        : glibc-2.29.9000-26.fc31.x86_64                       9/19 
  Verifying        : glibc-all-langpacks-2.29.9000-26.fc31.x86_64        10/19 
  Verifying        : glibc-common-2.29.9000-26.fc31.x86_64               11/19 
  Verifying        : libgcc-9.1.1-2.fc31.x86_64                          12/19 
  Verifying        : libselinux-2.9-2.fc31.x86_64                        13/19 
  Verifying        : libsepol-2.9-1.fc31.x86_64                          14/19 
  Verifying        : ncurses-base-6.1-10.20180923.fc30.noarch            15/19 
  Verifying        : ncurses-libs-6.1-10.20180923.fc30.x86_64            16/19 
  Verifying        : pcre2-10.33-3.fc31.x86_64                           17/19 
  Verifying        : setup-2.13.3-1.fc31.noarch                          18/19 
  Verifying        : tzdata-2019a-1.fc31.noarch                          19/19 

Installed:
  filesystem-3.11-1.fc31.x86_64                                                
  basesystem-11-7.fc30.noarch                                                  
  bash-5.0.7-1.fc31.x86_64                                                     
  fedora-gpg-keys-31-0.2.noarch                                                
  fedora-release-31-0.6.noarch                                                 
  fedora-release-common-31-0.6.noarch                                          
  fedora-repos-31-0.2.noarch                                                   
  fedora-repos-rawhide-31-0.2.noarch                                           
  glibc-2.29.9000-26.fc31.x86_64                                               
  glibc-all-langpacks-2.29.9000-26.fc31.x86_64                                 
  glibc-common-2.29.9000-26.fc31.x86_64                                        
  libgcc-9.1.1-2.fc31.x86_64                                                   
  libselinux-2.9-2.fc31.x86_64                                                 
  libsepol-2.9-1.fc31.x86_64                                                   
  ncurses-base-6.1-10.20180923.fc30.noarch                                     
  ncurses-libs-6.1-10.20180923.fc30.x86_64                                     
  pcre2-10.33-3.fc31.x86_64                                                    
  setup-2.13.3-1.fc31.noarch                                                   
  tzdata-2019a-1.fc31.noarch                                                   

Complete!
~~~

Please note there is no restorecon available, but the context are modified:

~~~
$ ls -lZ ~/filesystemtest/
total 60
lrwxrwxrwx.  1 root root system_u:object_r:bin_t:s0           7 Apr 29 14:53 bin -> usr/bin
dr-xr-xr-x.  2 root root system_u:object_r:boot_t:s0       4096 Apr 29 14:53 boot
drwxr-xr-x.  2 root root system_u:object_r:device_t:s0     4096 Jun 14 16:52 dev
drwxr-xr-x. 20 root root system_u:object_r:etc_t:s0        4096 Jun 14 16:52 etc
drwxr-xr-x.  2 root root system_u:object_r:home_root_t:s0  4096 Apr 29 14:53 home
lrwxrwxrwx.  1 root root system_u:object_r:lib_t:s0           7 Apr 29 14:53 lib -> usr/lib
lrwxrwxrwx.  1 root root system_u:object_r:lib_t:s0           9 Apr 29 14:53 lib64 -> usr/lib64
drwxr-xr-x.  2 root root system_u:object_r:mnt_t:s0        4096 Apr 29 14:53 media
drwxr-xr-x.  2 root root system_u:object_r:mnt_t:s0        4096 Apr 29 14:53 mnt
drwxr-xr-x.  2 root root system_u:object_r:usr_t:s0        4096 Apr 29 14:53 opt
dr-xr-xr-x.  2 root root system_u:object_r:default_t:s0    4096 Apr 29 14:53 proc
dr-xr-x---.  2 root root system_u:object_r:admin_home_t:s0 4096 Apr 29 14:53 root
drwxr-xr-x.  4 root root system_u:object_r:var_run_t:s0    4096 Jun 14 16:52 run
lrwxrwxrwx.  1 root root system_u:object_r:bin_t:s0           8 Apr 29 14:53 sbin -> usr/sbin
drwxr-xr-x.  2 root root system_u:object_r:var_t:s0        4096 Apr 29 14:53 srv
dr-xr-xr-x.  2 root root system_u:object_r:sysfs_t:s0      4096 Apr 29 14:53 sys
drwxrwxrwt.  2 root root system_u:object_r:tmp_t:s0        4096 Apr 29 14:53 tmp
drwxr-xr-x. 12 root root system_u:object_r:usr_t:s0        4096 Jun 14 16:52 usr
drwxr-xr-x. 19 root root system_u:object_r:var_t:s0        4096 Jun 14 16:52 var

$ ls -lZ ~/filesystemtest/var
total 68
drwxr-xr-x. 2 root     root     system_u:object_r:var_t:s0            4096 Apr 29 14:53 adm
drwxr-xr-x. 4 root     root     system_u:object_r:var_t:s0            4096 Jun 14 16:52 cache
drwxr-xr-x. 2 root     root     system_u:object_r:system_db_t:s0      4096 Apr 29 14:53 db
drwxr-xr-x. 2 root     root     system_u:object_r:var_t:s0            4096 Apr 29 14:53 empty
drwxr-xr-x. 2 root     root     system_u:object_r:public_content_t:s0 4096 Apr 29 14:53 ftp
drwxr-xr-x. 2 root     root     system_u:object_r:games_data_t:s0     4096 Apr 29 14:53 games
drwxr-xr-x. 7 root     root     system_u:object_r:var_lib_t:s0        4096 Jun 14 16:52 lib
drwxr-xr-x. 2 root     root     system_u:object_r:var_t:s0            4096 Apr 29 14:53 local
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0  4096 Jun 14 16:51 lock
drwxr-xr-x. 2 root     root     system_u:object_r:var_log_t:s0        4096 Apr 29 14:53 log
lrwxrwxrwx. 1 root     root     system_u:object_r:mail_spool_t:s0       10 Apr 29 14:53 mail -> spool/mail
drwxr-xr-x. 2 root     root     system_u:object_r:var_t:s0            4096 Apr 29 14:53 nis
drwxr-xr-x. 2 root     root     system_u:object_r:var_t:s0            4096 Apr 29 14:53 opt
drwxr-xr-x. 2 root     root     system_u:object_r:var_t:s0            4096 Apr 29 14:53 preserve
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0  4096 Jun 14 16:51 run
drwxr-xr-x. 4 root     root     system_u:object_r:var_spool_t:s0      4096 Jun 14 16:52 spool
drwxrwxrwt. 2 root     root     system_u:object_r:tmp_t:s0            4096 Jun 14 16:52 tmp
drwxr-xr-x. 2 root     root     system_u:object_r:var_yp_t:s0         4096 Apr 29 14:53 yp
~~~

But except the /var/{run,lock} which supports the theory of OP, that these directories are actually locked by DNF.

But lets begin from scratch and install restorecon:

~~~
$ sudo rm -rf ~/filesystemtest/

$ mkdir -p ~/filesystemtest/{var/{run,lock},usr/lib/debug,sys,boot,proc,dev,media}

$ ls -lZ ~/filesystemtest/
total 28
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:57 boot
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:57 dev
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:57 media
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:57 proc
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:57 sys
drwxrwxr-x. 3 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:57 usr
drwxrwxr-x. 4 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:57 var

$ ls -lZ ~/filesystemtest/var
total 8
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:57 lock
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0 4096 Jun 14 16:57 run

$ sudo dnf --installroot ~/filesystemtest --releasever 31 --setopt=deltarpm=False --disableplugin=local --disableplugin=spacewalk install /usr/sbin/restorecon
Fedora - Rawhide - Developmental packages for  6.2 MB/s |  72 MB     00:11    
Dependencies resolved.
===============================================================================
 Package                 Arch   Version                          Repo     Size
===============================================================================
Installing:
 policycoreutils         x86_64 2.9-1.fc31                       rawhide 193 k
Installing dependencies:
 alternatives            x86_64 1.11-4.fc31                      rawhide  33 k
 audit-libs              x86_64 3.0-0.7.20190326git03e7489.fc31  rawhide 107 k
 basesystem              noarch 11-7.fc30                        rawhide 6.9 k
 bash                    x86_64 5.0.7-1.fc31                     rawhide 1.6 M
 brotli                  x86_64 1.0.7-3.fc30                     rawhide 311 k
 bzip2-libs              x86_64 1.0.6-29.fc30                    rawhide  37 k
 ca-certificates         noarch 2018.2.26-3.fc30                 rawhide 385 k
 coreutils               x86_64 8.31-2.fc31                      rawhide 1.2 M
 coreutils-common        x86_64 8.31-2.fc31                      rawhide 2.0 M
 cracklib                x86_64 2.9.6-19.fc30                    rawhide  77 k
 crypto-policies         noarch 20190527-1.git0b3add8.fc31       rawhide  47 k
 curl                    x86_64 7.65.1-1.fc31                    rawhide 299 k
 cyrus-sasl-lib          x86_64 2.1.27-0.6rc7.fc30               rawhide  92 k
 diffutils               x86_64 3.7-2.fc30                       rawhide 384 k
 elfutils-libelf         x86_64 0.176-3.fc31                     rawhide 180 k
 expat                   x86_64 2.2.6-2.fc30                     rawhide  92 k
 fedora-gpg-keys         noarch 31-0.2                           rawhide 102 k
 fedora-release          noarch 31-0.6                           rawhide  11 k
 fedora-release-common   noarch 31-0.6                           rawhide  19 k
 fedora-repos            noarch 31-0.2                           rawhide 9.2 k
 fedora-repos-rawhide    noarch 31-0.2                           rawhide 8.4 k
 filesystem              x86_64 3.11-1.fc31                      rawhide 1.1 M
 gawk                    x86_64 4.2.1-6.fc31                     rawhide 1.1 M
 glibc                   x86_64 2.29.9000-26.fc31                rawhide 3.6 M
 glibc-all-langpacks     x86_64 2.29.9000-26.fc31                rawhide  25 M
 glibc-common            x86_64 2.29.9000-26.fc31                rawhide 524 k
 gmp                     x86_64 1:6.1.2-10.fc31                  rawhide 265 k
 grep                    x86_64 3.3-2.fc31                       rawhide 246 k
 gzip                    x86_64 1.9-9.fc31                       rawhide 151 k
 keyutils-libs           x86_64 1.6-2.fc30                       rawhide  30 k
 krb5-libs               x86_64 1.17-30.fc31                     rawhide 745 k
 libacl                  x86_64 2.2.53-3.fc30                    rawhide  24 k
 libarchive              x86_64 3.3.3-7.fc31                     rawhide 342 k
 libattr                 x86_64 2.4.48-5.fc30                    rawhide  17 k
 libblkid                x86_64 2.34-0.2.fc31                    rawhide 154 k
 libcap                  x86_64 2.26-5.fc30                      rawhide  46 k
 libcap-ng               x86_64 0.7.9-7.fc31                     rawhide  27 k
 libcom_err              x86_64 1.45.0-1.fc31                    rawhide  26 k
 libcurl                 x86_64 7.65.1-1.fc31                    rawhide 262 k
 libdb                   x86_64 5.3.28-37.fc30                   rawhide 735 k
 libdb-utils             x86_64 5.3.28-37.fc30                   rawhide 129 k
 libfdisk                x86_64 2.34-0.2.fc31                    rawhide 203 k
 libffi                  x86_64 3.1-20.fc31                      rawhide  32 k
 libgcc                  x86_64 9.1.1-2.fc31                     rawhide  91 k
 libgcrypt               x86_64 1.8.4-3.fc30                     rawhide 435 k
 libgpg-error            x86_64 1.33-2.fc30                      rawhide 238 k
 libidn2                 x86_64 2.2.0-1.fc31                     rawhide  90 k
 libmetalink             x86_64 0.1.3-8.fc30                     rawhide  28 k
 libmount                x86_64 2.34-0.2.fc31                    rawhide 177 k
 libnghttp2              x86_64 1.38.0-1.fc31                    rawhide  74 k
 libnsl2                 x86_64 1.2.0-4.20180605git4a062cf.fc30  rawhide  54 k
 libpsl                  x86_64 0.21.0-1.fc31                    rawhide  59 k
 libpwquality            x86_64 1.4.0-12.fc30                    rawhide  96 k
 libselinux              x86_64 2.9-2.fc31                       rawhide  84 k
 libselinux-utils        x86_64 2.9-2.fc31                       rawhide 161 k
 libsemanage             x86_64 2.9-1.fc31                       rawhide 112 k
 libsepol                x86_64 2.9-1.fc31                       rawhide 280 k
 libsigsegv              x86_64 2.11-7.fc30                      rawhide  25 k
 libsmartcols            x86_64 2.34-0.2.fc31                    rawhide 123 k
 libssh                  x86_64 0.8.7-1.fc31                     rawhide 212 k
 libtasn1                x86_64 4.13-7.fc30                      rawhide  67 k
 libtirpc                x86_64 1.1.4-2.rc2.fc30.1               rawhide  97 k
 libunistring            x86_64 0.9.10-5.fc30                    rawhide 415 k
 libutempter             x86_64 1.1.6-16.fc30                    rawhide  24 k
 libuuid                 x86_64 2.34-0.2.fc31                    rawhide  28 k
 libverto                x86_64 0.3.0-7.fc30                     rawhide  20 k
 libxcrypt               x86_64 4.4.6-1.fc31                     rawhide 122 k
 libxml2                 x86_64 2.9.9-2.fc30                     rawhide 651 k
 libzstd                 x86_64 1.4.0-1.fc31                     rawhide 260 k
 lua-libs                x86_64 5.3.5-5.fc30                     rawhide 104 k
 lz4-libs                x86_64 1.8.3-2.fc30                     rawhide  60 k
 mpfr                    x86_64 3.1.6-4.fc30                     rawhide 212 k
 ncurses                 x86_64 6.1-10.20180923.fc30             rawhide 360 k
 ncurses-base            noarch 6.1-10.20180923.fc30             rawhide  59 k
 ncurses-libs            x86_64 6.1-10.20180923.fc30             rawhide 288 k
 openldap                x86_64 2.4.47-2.fc31                    rawhide 294 k
 openssl                 x86_64 1:1.1.1c-3.fc31                  rawhide 634 k
 openssl-libs            x86_64 1:1.1.1c-3.fc31                  rawhide 1.4 M
 p11-kit                 x86_64 0.23.16.1-1.fc31                 rawhide 267 k
 p11-kit-trust           x86_64 0.23.16.1-1.fc31                 rawhide 133 k
 pam                     x86_64 1.3.1-17.fc30                    rawhide 624 k
 pcre                    x86_64 8.43-2.fc31                      rawhide 190 k
 pcre2                   x86_64 10.33-3.fc31                     rawhide 252 k
 popt                    x86_64 1.16-17.fc30                     rawhide  55 k
 publicsuffix-list-dafsa noarch 20190417-1.fc31                  rawhide  54 k
 readline                x86_64 8.0-2.fc30                       rawhide 191 k
 rpm                     x86_64 4.14.2.1-12.fc31                 rawhide 488 k
 rpm-libs                x86_64 4.14.2.1-12.fc31                 rawhide 287 k
 sed                     x86_64 4.5-3.fc30                       rawhide 285 k
 setup                   noarch 2.13.3-1.fc31                    rawhide 149 k
 shadow-utils            x86_64 2:4.6-14.fc31                    rawhide 1.2 M
 systemd-libs            x86_64 242-3.git7a6d834.fc31            rawhide 512 k
 tzdata                  noarch 2019a-1.fc31                     rawhide 425 k
 util-linux              x86_64 2.34-0.2.fc31                    rawhide 2.6 M
 whois-nls               noarch 5.4.2-2.fc31                     rawhide  32 k
 xz-libs                 x86_64 5.2.4-5.fc30                     rawhide  85 k
 zlib                    x86_64 1.2.11-15.fc30                   rawhide  89 k
Installing weak dependencies:
 cracklib-dicts          x86_64 2.9.6-19.fc30                    rawhide 3.9 M
 mkpasswd                x86_64 5.4.2-2.fc31                     rawhide  40 k
 openssl-pkcs11          x86_64 0.4.10-1.fc31                    rawhide  60 k

Transaction Summary
===============================================================================
Install  101 Packages

Total download size: 61 M
Installed size: 359 M
Is this ok [y/N]: y
Downloading Packages:
(1/101): basesystem-11-7.fc30.noarch.rpm        34 kB/s | 6.9 kB     00:00    
(2/101): alternatives-1.11-4.fc31.x86_64.rpm   127 kB/s |  33 kB     00:00    
(3/101): audit-libs-3.0-0.7.20190326git03e7489 245 kB/s | 107 kB     00:00    
(4/101): brotli-1.0.7-3.fc30.x86_64.rpm        1.5 MB/s | 311 kB     00:00    
(5/101): bzip2-libs-1.0.6-29.fc30.x86_64.rpm   490 kB/s |  37 kB     00:00    
(6/101): ca-certificates-2018.2.26-3.fc30.noar 2.9 MB/s | 385 kB     00:00    
(7/101): bash-5.0.7-1.fc31.x86_64.rpm          3.2 MB/s | 1.6 MB     00:00    
(8/101): cracklib-2.9.6-19.fc30.x86_64.rpm     2.7 MB/s |  77 kB     00:00    
(9/101): coreutils-common-8.31-2.fc31.x86_64.r 6.6 MB/s | 2.0 MB     00:00    
(10/101): crypto-policies-20190527-1.git0b3add 1.3 MB/s |  47 kB     00:00    
(11/101): curl-7.65.1-1.fc31.x86_64.rpm        4.0 MB/s | 299 kB     00:00    
(12/101): cyrus-sasl-lib-2.1.27-0.6rc7.fc30.x8 3.2 MB/s |  92 kB     00:00    
(13/101): diffutils-3.7-2.fc30.x86_64.rpm      5.8 MB/s | 384 kB     00:00    
(14/101): elfutils-libelf-0.176-3.fc31.x86_64. 5.4 MB/s | 180 kB     00:00    
(15/101): expat-2.2.6-2.fc30.x86_64.rpm        2.9 MB/s |  92 kB     00:00    
(16/101): cracklib-dicts-2.9.6-19.fc30.x86_64. 9.0 MB/s | 3.9 MB     00:00    
(17/101): fedora-gpg-keys-31-0.2.noarch.rpm    4.0 MB/s | 102 kB     00:00    
(18/101): fedora-release-31-0.6.noarch.rpm     792 kB/s |  11 kB     00:00    
(19/101): fedora-release-common-31-0.6.noarch. 1.2 MB/s |  19 kB     00:00    
(20/101): fedora-repos-31-0.2.noarch.rpm       542 kB/s | 9.2 kB     00:00    
(21/101): fedora-repos-rawhide-31-0.2.noarch.r 575 kB/s | 8.4 kB     00:00    
(22/101): filesystem-3.11-1.fc31.x86_64.rpm    9.2 MB/s | 1.1 MB     00:00    
(23/101): gawk-4.2.1-6.fc31.x86_64.rpm         6.8 MB/s | 1.1 MB     00:00    
(24/101): coreutils-8.31-2.fc31.x86_64.rpm     1.1 MB/s | 1.2 MB     00:01    
(25/101): glibc-2.29.9000-26.fc31.x86_64.rpm   9.9 MB/s | 3.6 MB     00:00    
(26/101): gmp-6.1.2-10.fc31.x86_64.rpm         5.0 MB/s | 265 kB     00:00    
(27/101): grep-3.3-2.fc31.x86_64.rpm           4.9 MB/s | 246 kB     00:00    
(28/101): gzip-1.9-9.fc31.x86_64.rpm           3.6 MB/s | 151 kB     00:00    
(29/101): keyutils-libs-1.6-2.fc30.x86_64.rpm  841 kB/s |  30 kB     00:00    
(30/101): krb5-libs-1.17-30.fc31.x86_64.rpm    6.0 MB/s | 745 kB     00:00    
(31/101): libacl-2.2.53-3.fc30.x86_64.rpm      574 kB/s |  24 kB     00:00    
(32/101): glibc-common-2.29.9000-26.fc31.x86_6 1.1 MB/s | 524 kB     00:00    
(33/101): libarchive-3.3.3-7.fc31.x86_64.rpm   5.6 MB/s | 342 kB     00:00    
(34/101): libattr-2.4.48-5.fc30.x86_64.rpm     282 kB/s |  17 kB     00:00    
(35/101): libblkid-2.34-0.2.fc31.x86_64.rpm    2.7 MB/s | 154 kB     00:00    
(36/101): libcap-2.26-5.fc30.x86_64.rpm        717 kB/s |  46 kB     00:00    
(37/101): libcap-ng-0.7.9-7.fc31.x86_64.rpm    505 kB/s |  27 kB     00:00    
(38/101): libcom_err-1.45.0-1.fc31.x86_64.rpm  547 kB/s |  26 kB     00:00    
(39/101): libcurl-7.65.1-1.fc31.x86_64.rpm     4.2 MB/s | 262 kB     00:00    
(40/101): libdb-utils-5.3.28-37.fc30.x86_64.rp 2.1 MB/s | 129 kB     00:00    
(41/101): libfdisk-2.34-0.2.fc31.x86_64.rpm    3.0 MB/s | 203 kB     00:00    
(42/101): libffi-3.1-20.fc31.x86_64.rpm        553 kB/s |  32 kB     00:00    
(43/101): libgcc-9.1.1-2.fc31.x86_64.rpm       1.3 MB/s |  91 kB     00:00    
(44/101): libgcrypt-1.8.4-3.fc30.x86_64.rpm    4.4 MB/s | 435 kB     00:00    
(45/101): libgpg-error-1.33-2.fc30.x86_64.rpm  1.5 MB/s | 238 kB     00:00    
(46/101): libidn2-2.2.0-1.fc31.x86_64.rpm      1.1 MB/s |  90 kB     00:00    
(47/101): libmetalink-0.1.3-8.fc30.x86_64.rpm  374 kB/s |  28 kB     00:00    
(48/101): libmount-2.34-0.2.fc31.x86_64.rpm    2.0 MB/s | 177 kB     00:00    
(49/101): libnghttp2-1.38.0-1.fc31.x86_64.rpm  882 kB/s |  74 kB     00:00    
(50/101): libnsl2-1.2.0-4.20180605git4a062cf.f 628 kB/s |  54 kB     00:00    
(51/101): libdb-5.3.28-37.fc30.x86_64.rpm      740 kB/s | 735 kB     00:00    
(52/101): libpsl-0.21.0-1.fc31.x86_64.rpm      669 kB/s |  59 kB     00:00    
(53/101): glibc-all-langpacks-2.29.9000-26.fc3  12 MB/s |  25 MB     00:02    
(54/101): libpwquality-1.4.0-12.fc30.x86_64.rp 479 kB/s |  96 kB     00:00    
(55/101): libselinux-2.9-2.fc31.x86_64.rpm     559 kB/s |  84 kB     00:00    
(56/101): libselinux-utils-2.9-2.fc31.x86_64.r 4.9 MB/s | 161 kB     00:00    
(57/101): libsepol-2.9-1.fc31.x86_64.rpm       5.7 MB/s | 280 kB     00:00    
(58/101): libsigsegv-2.11-7.fc30.x86_64.rpm    1.0 MB/s |  25 kB     00:00    
(59/101): libsemanage-2.9-1.fc31.x86_64.rpm    1.9 MB/s | 112 kB     00:00    
(60/101): libsmartcols-2.34-0.2.fc31.x86_64.rp 3.9 MB/s | 123 kB     00:00    
(61/101): libssh-0.8.7-1.fc31.x86_64.rpm       6.2 MB/s | 212 kB     00:00    
(62/101): libtirpc-1.1.4-2.rc2.fc30.1.x86_64.r 2.8 MB/s |  97 kB     00:00    
(63/101): libtasn1-4.13-7.fc30.x86_64.rpm      1.2 MB/s |  67 kB     00:00    
(64/101): libunistring-0.9.10-5.fc30.x86_64.rp 8.1 MB/s | 415 kB     00:00    
(65/101): libuuid-2.34-0.2.fc31.x86_64.rpm     1.0 MB/s |  28 kB     00:00    
(66/101): libutempter-1.1.6-16.fc30.x86_64.rpm 861 kB/s |  24 kB     00:00    
(67/101): libverto-0.3.0-7.fc30.x86_64.rpm     1.0 MB/s |  20 kB     00:00    
(68/101): libxml2-2.9.9-2.fc30.x86_64.rpm      8.9 MB/s | 651 kB     00:00    
(69/101): libzstd-1.4.0-1.fc31.x86_64.rpm      3.7 MB/s | 260 kB     00:00    
(70/101): libxcrypt-4.4.6-1.fc31.x86_64.rpm    1.3 MB/s | 122 kB     00:00    
(71/101): lua-libs-5.3.5-5.fc30.x86_64.rpm     2.9 MB/s | 104 kB     00:00    
(72/101): lz4-libs-1.8.3-2.fc30.x86_64.rpm     2.4 MB/s |  60 kB     00:00    
(73/101): mkpasswd-5.4.2-2.fc31.x86_64.rpm     1.6 MB/s |  40 kB     00:00    
(74/101): mpfr-3.1.6-4.fc30.x86_64.rpm         8.5 MB/s | 212 kB     00:00    
(75/101): ncurses-6.1-10.20180923.fc30.x86_64. 8.4 MB/s | 360 kB     00:00    
(76/101): ncurses-base-6.1-10.20180923.fc30.no 1.4 MB/s |  59 kB     00:00    
(77/101): ncurses-libs-6.1-10.20180923.fc30.x8 7.7 MB/s | 288 kB     00:00    
(78/101): openldap-2.4.47-2.fc31.x86_64.rpm    6.1 MB/s | 294 kB     00:00    
(79/101): openssl-pkcs11-0.4.10-1.fc31.x86_64. 1.3 MB/s |  60 kB     00:00    
(80/101): p11-kit-0.23.16.1-1.fc31.x86_64.rpm  4.5 MB/s | 267 kB     00:00    
(81/101): openssl-libs-1.1.1c-3.fc31.x86_64.rp 9.9 MB/s | 1.4 MB     00:00    
(82/101): p11-kit-trust-0.23.16.1-1.fc31.x86_6 4.0 MB/s | 133 kB     00:00    
(83/101): pam-1.3.1-17.fc30.x86_64.rpm         9.5 MB/s | 624 kB     00:00    
(84/101): pcre-8.43-2.fc31.x86_64.rpm          3.9 MB/s | 190 kB     00:00    
(85/101): pcre2-10.33-3.fc31.x86_64.rpm        5.0 MB/s | 252 kB     00:00    
(86/101): policycoreutils-2.9-1.fc31.x86_64.rp 3.7 MB/s | 193 kB     00:00    
(87/101): popt-1.16-17.fc30.x86_64.rpm         3.1 MB/s |  55 kB     00:00    
(88/101): publicsuffix-list-dafsa-20190417-1.f 1.9 MB/s |  54 kB     00:00    
(89/101): openssl-1.1.1c-3.fc31.x86_64.rpm     1.9 MB/s | 634 kB     00:00    
(90/101): readline-8.0-2.fc30.x86_64.rpm       4.9 MB/s | 191 kB     00:00    
(91/101): rpm-4.14.2.1-12.fc31.x86_64.rpm      7.9 MB/s | 488 kB     00:00    
(92/101): sed-4.5-3.fc30.x86_64.rpm            4.4 MB/s | 285 kB     00:00    
(93/101): setup-2.13.3-1.fc31.noarch.rpm       5.4 MB/s | 149 kB     00:00    
(94/101): systemd-libs-242-3.git7a6d834.fc31.x 5.6 MB/s | 512 kB     00:00    
(95/101): shadow-utils-4.6-14.fc31.x86_64.rpm  9.2 MB/s | 1.2 MB     00:00    
(96/101): rpm-libs-4.14.2.1-12.fc31.x86_64.rpm 1.4 MB/s | 287 kB     00:00    
(97/101): tzdata-2019a-1.fc31.noarch.rpm       7.8 MB/s | 425 kB     00:00    
(98/101): whois-nls-5.4.2-2.fc31.noarch.rpm    520 kB/s |  32 kB     00:00    
(99/101): xz-libs-5.2.4-5.fc30.x86_64.rpm      1.6 MB/s |  85 kB     00:00    
(100/101): zlib-1.2.11-15.fc30.x86_64.rpm      1.1 MB/s |  89 kB     00:00    
(101/101): util-linux-2.34-0.2.fc31.x86_64.rpm  13 MB/s | 2.6 MB     00:00    
-------------------------------------------------------------------------------
Total                                           11 MB/s |  61 MB     00:05     
warning: /home/vondruch/filesystemtest/var/cache/dnf/rawhide-2d95c80a1fa0a67d/packages/alternatives-1.11-4.fc31.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 3c3359c4: NOKEY
Fedora - Rawhide - Developmental packages for  1.6 MB/s | 1.6 kB     00:00    
Importing GPG key 0x3C3359C4:
 Userid     : "Fedora (31) <fedora-31-primary>"
 Fingerprint: 7D22 D586 7F2A 4236 474B F7B8 50CB 390B 3C33 59C4
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-31-x86_64
Is this ok [y/N]: y
Key imported successfully
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Running scriptlet: filesystem-3.11-1.fc31.x86_64                         1/1 
  Preparing        :                                                       1/1 
  Installing       : libgcc-9.1.1-2.fc31.x86_64                          1/101 
  Running scriptlet: libgcc-9.1.1-2.fc31.x86_64                          1/101 
  Installing       : whois-nls-5.4.2-2.fc31.noarch                       2/101 
  Installing       : tzdata-2019a-1.fc31.noarch                          3/101 
  Installing       : publicsuffix-list-dafsa-20190417-1.fc31.noarch      4/101 
  Installing       : ncurses-base-6.1-10.20180923.fc30.noarch            5/101 
  Installing       : fedora-gpg-keys-31-0.2.noarch                       6/101 
  Installing       : fedora-release-31-0.6.noarch                        7/101 
  Installing       : fedora-release-common-31-0.6.noarch                 8/101 
  Installing       : fedora-repos-rawhide-31-0.2.noarch                  9/101 
  Installing       : fedora-repos-31-0.2.noarch                         10/101 
  Installing       : setup-2.13.3-1.fc31.noarch                         11/101 
  Running scriptlet: setup-2.13.3-1.fc31.noarch                         11/101 
  Installing       : filesystem-3.11-1.fc31.x86_64                      12/101 
  Installing       : basesystem-11-7.fc30.noarch                        13/101 
  Installing       : pcre2-10.33-3.fc31.x86_64                          14/101 
  Installing       : libselinux-2.9-2.fc31.x86_64                       15/101 
  Installing       : ncurses-libs-6.1-10.20180923.fc30.x86_64           16/101 
  Installing       : glibc-all-langpacks-2.29.9000-26.fc31.x86_64       17/101 
  Installing       : glibc-common-2.29.9000-26.fc31.x86_64              18/101 
  Running scriptlet: glibc-2.29.9000-26.fc31.x86_64                     19/101 
  Installing       : glibc-2.29.9000-26.fc31.x86_64                     19/101 
  Running scriptlet: glibc-2.29.9000-26.fc31.x86_64                     19/101 
  Installing       : bash-5.0.7-1.fc31.x86_64                           20/101 
  Running scriptlet: bash-5.0.7-1.fc31.x86_64                           20/101 
  Installing       : libsepol-2.9-1.fc31.x86_64                         21/101 
  Running scriptlet: libsepol-2.9-1.fc31.x86_64                         21/101 
  Installing       : zlib-1.2.11-15.fc30.x86_64                         22/101 
  Installing       : libxcrypt-4.4.6-1.fc31.x86_64                      23/101 
  Installing       : mkpasswd-5.4.2-2.fc31.x86_64                       24/101 
  Installing       : libcom_err-1.45.0-1.fc31.x86_64                    25/101 
  Installing       : libdb-5.3.28-37.fc30.x86_64                        26/101 
  Installing       : libuuid-2.34-0.2.fc31.x86_64                       27/101 
  Installing       : xz-libs-5.2.4-5.fc30.x86_64                        28/101 
  Installing       : bzip2-libs-1.0.6-29.fc30.x86_64                    29/101 
  Installing       : gmp-1:6.1.2-10.fc31.x86_64                         30/101 
  Installing       : libattr-2.4.48-5.fc30.x86_64                       31/101 
  Installing       : libacl-2.2.53-3.fc30.x86_64                        32/101 
  Installing       : sed-4.5-3.fc30.x86_64                              33/101 
  Installing       : libcap-2.26-5.fc30.x86_64                          34/101 
  Installing       : libcap-ng-0.7.9-7.fc31.x86_64                      35/101 
  Installing       : audit-libs-3.0-0.7.20190326git03e7489.fc31.x86_    36/101 
  Installing       : libsemanage-2.9-1.fc31.x86_64                      37/101 
  Installing       : libunistring-0.9.10-5.fc30.x86_64                  38/101 
  Installing       : libidn2-2.2.0-1.fc31.x86_64                        39/101 
  Installing       : libzstd-1.4.0-1.fc31.x86_64                        40/101 
  Installing       : lz4-libs-1.8.3-2.fc30.x86_64                       41/101 
  Installing       : popt-1.16-17.fc30.x86_64                           42/101 
  Installing       : libpsl-0.21.0-1.fc31.x86_64                        43/101 
  Installing       : shadow-utils-2:4.6-14.fc31.x86_64                  44/101 
  Running scriptlet: libutempter-1.1.6-16.fc30.x86_64                   45/101 
  Installing       : libutempter-1.1.6-16.fc30.x86_64                   45/101 
  Installing       : mpfr-3.1.6-4.fc30.x86_64                           46/101 
  Installing       : libxml2-2.9.9-2.fc30.x86_64                        47/101 
  Installing       : libdb-utils-5.3.28-37.fc30.x86_64                  48/101 
  Installing       : elfutils-libelf-0.176-3.fc31.x86_64                49/101 
  Installing       : libselinux-utils-2.9-2.fc31.x86_64                 50/101 
  Installing       : alternatives-1.11-4.fc31.x86_64                    51/101 
  Installing       : brotli-1.0.7-3.fc30.x86_64                         52/101 
  Installing       : diffutils-3.7-2.fc30.x86_64                        53/101 
  Installing       : expat-2.2.6-2.fc30.x86_64                          54/101 
  Installing       : libmetalink-0.1.3-8.fc30.x86_64                    55/101 
  Installing       : keyutils-libs-1.6-2.fc30.x86_64                    56/101 
  Installing       : libffi-3.1-20.fc31.x86_64                          57/101 
  Installing       : p11-kit-0.23.16.1-1.fc31.x86_64                    58/101 
  Installing       : libgpg-error-1.33-2.fc30.x86_64                    59/101 
  Installing       : libgcrypt-1.8.4-3.fc30.x86_64                      60/101 
  Installing       : libnghttp2-1.38.0-1.fc31.x86_64                    61/101 
  Installing       : libsigsegv-2.11-7.fc30.x86_64                      62/101 
  Installing       : libsmartcols-2.34-0.2.fc31.x86_64                  63/101 
  Installing       : libtasn1-4.13-7.fc30.x86_64                        64/101 
  Installing       : p11-kit-trust-0.23.16.1-1.fc31.x86_64              65/101 
  Running scriptlet: p11-kit-trust-0.23.16.1-1.fc31.x86_64              65/101 
  Installing       : libverto-0.3.0-7.fc30.x86_64                       66/101 
  Installing       : lua-libs-5.3.5-5.fc30.x86_64                       67/101 
  Installing       : ncurses-6.1-10.20180923.fc30.x86_64                68/101 
  Installing       : pcre-8.43-2.fc31.x86_64                            69/101 
  Installing       : grep-3.3-2.fc31.x86_64                             70/101 
  Installing       : readline-8.0-2.fc30.x86_64                         71/101 
  Installing       : gawk-4.2.1-6.fc31.x86_64                           72/101 
  Installing       : coreutils-common-8.31-2.fc31.x86_64                73/101 
  Installing       : openssl-1:1.1.1c-3.fc31.x86_64                     74/101 
  Installing       : openssl-pkcs11-0.4.10-1.fc31.x86_64                75/101 
  Installing       : openssl-libs-1:1.1.1c-3.fc31.x86_64                76/101 
  Installing       : coreutils-8.31-2.fc31.x86_64                       77/101 
  Installing       : crypto-policies-20190527-1.git0b3add8.fc31.noar    78/101 
  Running scriptlet: crypto-policies-20190527-1.git0b3add8.fc31.noar    78/101 
  Running scriptlet: ca-certificates-2018.2.26-3.fc30.noarch            79/101 
  Installing       : ca-certificates-2018.2.26-3.fc30.noarch            79/101 
  Running scriptlet: ca-certificates-2018.2.26-3.fc30.noarch            79/101 
  Installing       : krb5-libs-1.17-30.fc31.x86_64                      80/101 
  Installing       : libblkid-2.34-0.2.fc31.x86_64                      81/101 
  Running scriptlet: libblkid-2.34-0.2.fc31.x86_64                      81/101 
  Installing       : libtirpc-1.1.4-2.rc2.fc30.1.x86_64                 82/101 
  Installing       : libnsl2-1.2.0-4.20180605git4a062cf.fc30.x86_64     83/101 
  Installing       : libfdisk-2.34-0.2.fc31.x86_64                      84/101 
  Installing       : libmount-2.34-0.2.fc31.x86_64                      85/101 
  Installing       : cyrus-sasl-lib-2.1.27-0.6rc7.fc30.x86_64           86/101 
  Installing       : openldap-2.4.47-2.fc31.x86_64                      87/101 
  Installing       : libssh-0.8.7-1.fc31.x86_64                         88/101 
  Installing       : libcurl-7.65.1-1.fc31.x86_64                       89/101 
  Installing       : curl-7.65.1-1.fc31.x86_64                          90/101 
  Installing       : gzip-1.9-9.fc31.x86_64                             91/101 
  Installing       : cracklib-2.9.6-19.fc30.x86_64                      92/101 
  Installing       : cracklib-dicts-2.9.6-19.fc30.x86_64                93/101 
  Installing       : libpwquality-1.4.0-12.fc30.x86_64                  94/101 
  Installing       : pam-1.3.1-17.fc30.x86_64                           95/101 
  Installing       : systemd-libs-242-3.git7a6d834.fc31.x86_64          96/101 
  Running scriptlet: systemd-libs-242-3.git7a6d834.fc31.x86_64          96/101 
  Installing       : util-linux-2.34-0.2.fc31.x86_64                    97/101 
  Running scriptlet: util-linux-2.34-0.2.fc31.x86_64                    97/101 
  Installing       : libarchive-3.3.3-7.fc31.x86_64                     98/101 
  Installing       : rpm-4.14.2.1-12.fc31.x86_64                        99/101 
  Installing       : rpm-libs-4.14.2.1-12.fc31.x86_64                  100/101 
  Installing       : policycoreutils-2.9-1.fc31.x86_64                 101/101 
  Running scriptlet: policycoreutils-2.9-1.fc31.x86_64                 101/101 
  Running scriptlet: filesystem-3.11-1.fc31.x86_64                     101/101 
  Running scriptlet: glibc-all-langpacks-2.29.9000-26.fc31.x86_64      101/101 
  Running scriptlet: glibc-common-2.29.9000-26.fc31.x86_64             101/101 
  Verifying        : alternatives-1.11-4.fc31.x86_64                     1/101 
  Verifying        : audit-libs-3.0-0.7.20190326git03e7489.fc31.x86_     2/101 
  Verifying        : basesystem-11-7.fc30.noarch                         3/101 
  Verifying        : bash-5.0.7-1.fc31.x86_64                            4/101 
  Verifying        : brotli-1.0.7-3.fc30.x86_64                          5/101 
  Verifying        : bzip2-libs-1.0.6-29.fc30.x86_64                     6/101 
  Verifying        : ca-certificates-2018.2.26-3.fc30.noarch             7/101 
  Verifying        : coreutils-8.31-2.fc31.x86_64                        8/101 
  Verifying        : coreutils-common-8.31-2.fc31.x86_64                 9/101 
  Verifying        : cracklib-2.9.6-19.fc30.x86_64                      10/101 
  Verifying        : cracklib-dicts-2.9.6-19.fc30.x86_64                11/101 
  Verifying        : crypto-policies-20190527-1.git0b3add8.fc31.noar    12/101 
  Verifying        : curl-7.65.1-1.fc31.x86_64                          13/101 
  Verifying        : cyrus-sasl-lib-2.1.27-0.6rc7.fc30.x86_64           14/101 
  Verifying        : diffutils-3.7-2.fc30.x86_64                        15/101 
  Verifying        : elfutils-libelf-0.176-3.fc31.x86_64                16/101 
  Verifying        : expat-2.2.6-2.fc30.x86_64                          17/101 
  Verifying        : fedora-gpg-keys-31-0.2.noarch                      18/101 
  Verifying        : fedora-release-31-0.6.noarch                       19/101 
  Verifying        : fedora-release-common-31-0.6.noarch                20/101 
  Verifying        : fedora-repos-31-0.2.noarch                         21/101 
  Verifying        : fedora-repos-rawhide-31-0.2.noarch                 22/101 
  Verifying        : filesystem-3.11-1.fc31.x86_64                      23/101 
  Verifying        : gawk-4.2.1-6.fc31.x86_64                           24/101 
  Verifying        : glibc-2.29.9000-26.fc31.x86_64                     25/101 
  Verifying        : glibc-all-langpacks-2.29.9000-26.fc31.x86_64       26/101 
  Verifying        : glibc-common-2.29.9000-26.fc31.x86_64              27/101 
  Verifying        : gmp-1:6.1.2-10.fc31.x86_64                         28/101 
  Verifying        : grep-3.3-2.fc31.x86_64                             29/101 
  Verifying        : gzip-1.9-9.fc31.x86_64                             30/101 
  Verifying        : keyutils-libs-1.6-2.fc30.x86_64                    31/101 
  Verifying        : krb5-libs-1.17-30.fc31.x86_64                      32/101 
  Verifying        : libacl-2.2.53-3.fc30.x86_64                        33/101 
  Verifying        : libarchive-3.3.3-7.fc31.x86_64                     34/101 
  Verifying        : libattr-2.4.48-5.fc30.x86_64                       35/101 
  Verifying        : libblkid-2.34-0.2.fc31.x86_64                      36/101 
  Verifying        : libcap-2.26-5.fc30.x86_64                          37/101 
  Verifying        : libcap-ng-0.7.9-7.fc31.x86_64                      38/101 
  Verifying        : libcom_err-1.45.0-1.fc31.x86_64                    39/101 
  Verifying        : libcurl-7.65.1-1.fc31.x86_64                       40/101 
  Verifying        : libdb-5.3.28-37.fc30.x86_64                        41/101 
  Verifying        : libdb-utils-5.3.28-37.fc30.x86_64                  42/101 
  Verifying        : libfdisk-2.34-0.2.fc31.x86_64                      43/101 
  Verifying        : libffi-3.1-20.fc31.x86_64                          44/101 
  Verifying        : libgcc-9.1.1-2.fc31.x86_64                         45/101 
  Verifying        : libgcrypt-1.8.4-3.fc30.x86_64                      46/101 
  Verifying        : libgpg-error-1.33-2.fc30.x86_64                    47/101 
  Verifying        : libidn2-2.2.0-1.fc31.x86_64                        48/101 
  Verifying        : libmetalink-0.1.3-8.fc30.x86_64                    49/101 
  Verifying        : libmount-2.34-0.2.fc31.x86_64                      50/101 
  Verifying        : libnghttp2-1.38.0-1.fc31.x86_64                    51/101 
  Verifying        : libnsl2-1.2.0-4.20180605git4a062cf.fc30.x86_64     52/101 
  Verifying        : libpsl-0.21.0-1.fc31.x86_64                        53/101 
  Verifying        : libpwquality-1.4.0-12.fc30.x86_64                  54/101 
  Verifying        : libselinux-2.9-2.fc31.x86_64                       55/101 
  Verifying        : libselinux-utils-2.9-2.fc31.x86_64                 56/101 
  Verifying        : libsemanage-2.9-1.fc31.x86_64                      57/101 
  Verifying        : libsepol-2.9-1.fc31.x86_64                         58/101 
  Verifying        : libsigsegv-2.11-7.fc30.x86_64                      59/101 
  Verifying        : libsmartcols-2.34-0.2.fc31.x86_64                  60/101 
  Verifying        : libssh-0.8.7-1.fc31.x86_64                         61/101 
  Verifying        : libtasn1-4.13-7.fc30.x86_64                        62/101 
  Verifying        : libtirpc-1.1.4-2.rc2.fc30.1.x86_64                 63/101 
  Verifying        : libunistring-0.9.10-5.fc30.x86_64                  64/101 
  Verifying        : libutempter-1.1.6-16.fc30.x86_64                   65/101 
  Verifying        : libuuid-2.34-0.2.fc31.x86_64                       66/101 
  Verifying        : libverto-0.3.0-7.fc30.x86_64                       67/101 
  Verifying        : libxcrypt-4.4.6-1.fc31.x86_64                      68/101 
  Verifying        : libxml2-2.9.9-2.fc30.x86_64                        69/101 
  Verifying        : libzstd-1.4.0-1.fc31.x86_64                        70/101 
  Verifying        : lua-libs-5.3.5-5.fc30.x86_64                       71/101 
  Verifying        : lz4-libs-1.8.3-2.fc30.x86_64                       72/101 
  Verifying        : mkpasswd-5.4.2-2.fc31.x86_64                       73/101 
  Verifying        : mpfr-3.1.6-4.fc30.x86_64                           74/101 
  Verifying        : ncurses-6.1-10.20180923.fc30.x86_64                75/101 
  Verifying        : ncurses-base-6.1-10.20180923.fc30.noarch           76/101 
  Verifying        : ncurses-libs-6.1-10.20180923.fc30.x86_64           77/101 
  Verifying        : openldap-2.4.47-2.fc31.x86_64                      78/101 
  Verifying        : openssl-1:1.1.1c-3.fc31.x86_64                     79/101 
  Verifying        : openssl-libs-1:1.1.1c-3.fc31.x86_64                80/101 
  Verifying        : openssl-pkcs11-0.4.10-1.fc31.x86_64                81/101 
  Verifying        : p11-kit-0.23.16.1-1.fc31.x86_64                    82/101 
  Verifying        : p11-kit-trust-0.23.16.1-1.fc31.x86_64              83/101 
  Verifying        : pam-1.3.1-17.fc30.x86_64                           84/101 
  Verifying        : pcre-8.43-2.fc31.x86_64                            85/101 
  Verifying        : pcre2-10.33-3.fc31.x86_64                          86/101 
  Verifying        : policycoreutils-2.9-1.fc31.x86_64                  87/101 
  Verifying        : popt-1.16-17.fc30.x86_64                           88/101 
  Verifying        : publicsuffix-list-dafsa-20190417-1.fc31.noarch     89/101 
  Verifying        : readline-8.0-2.fc30.x86_64                         90/101 
  Verifying        : rpm-4.14.2.1-12.fc31.x86_64                        91/101 
  Verifying        : rpm-libs-4.14.2.1-12.fc31.x86_64                   92/101 
  Verifying        : sed-4.5-3.fc30.x86_64                              93/101 
  Verifying        : setup-2.13.3-1.fc31.noarch                         94/101 
  Verifying        : shadow-utils-2:4.6-14.fc31.x86_64                  95/101 
  Verifying        : systemd-libs-242-3.git7a6d834.fc31.x86_64          96/101 
  Verifying        : tzdata-2019a-1.fc31.noarch                         97/101 
  Verifying        : util-linux-2.34-0.2.fc31.x86_64                    98/101 
  Verifying        : whois-nls-5.4.2-2.fc31.noarch                      99/101 
  Verifying        : xz-libs-5.2.4-5.fc30.x86_64                       100/101 
  Verifying        : zlib-1.2.11-15.fc30.x86_64                        101/101 

Installed:
  policycoreutils-2.9-1.fc31.x86_64                                            
  cracklib-dicts-2.9.6-19.fc30.x86_64                                          
  mkpasswd-5.4.2-2.fc31.x86_64                                                 
  openssl-pkcs11-0.4.10-1.fc31.x86_64                                          
  alternatives-1.11-4.fc31.x86_64                                              
  audit-libs-3.0-0.7.20190326git03e7489.fc31.x86_64                            
  basesystem-11-7.fc30.noarch                                                  
  bash-5.0.7-1.fc31.x86_64                                                     
  brotli-1.0.7-3.fc30.x86_64                                                   
  bzip2-libs-1.0.6-29.fc30.x86_64                                              
  ca-certificates-2018.2.26-3.fc30.noarch                                      
  coreutils-8.31-2.fc31.x86_64                                                 
  coreutils-common-8.31-2.fc31.x86_64                                          
  cracklib-2.9.6-19.fc30.x86_64                                                
  crypto-policies-20190527-1.git0b3add8.fc31.noarch                            
  curl-7.65.1-1.fc31.x86_64                                                    
  cyrus-sasl-lib-2.1.27-0.6rc7.fc30.x86_64                                     
  diffutils-3.7-2.fc30.x86_64                                                  
  elfutils-libelf-0.176-3.fc31.x86_64                                          
  expat-2.2.6-2.fc30.x86_64                                                    
  fedora-gpg-keys-31-0.2.noarch                                                
  fedora-release-31-0.6.noarch                                                 
  fedora-release-common-31-0.6.noarch                                          
  fedora-repos-31-0.2.noarch                                                   
  fedora-repos-rawhide-31-0.2.noarch                                           
  filesystem-3.11-1.fc31.x86_64                                                
  gawk-4.2.1-6.fc31.x86_64                                                     
  glibc-2.29.9000-26.fc31.x86_64                                               
  glibc-all-langpacks-2.29.9000-26.fc31.x86_64                                 
  glibc-common-2.29.9000-26.fc31.x86_64                                        
  gmp-1:6.1.2-10.fc31.x86_64                                                   
  grep-3.3-2.fc31.x86_64                                                       
  gzip-1.9-9.fc31.x86_64                                                       
  keyutils-libs-1.6-2.fc30.x86_64                                              
  krb5-libs-1.17-30.fc31.x86_64                                                
  libacl-2.2.53-3.fc30.x86_64                                                  
  libarchive-3.3.3-7.fc31.x86_64                                               
  libattr-2.4.48-5.fc30.x86_64                                                 
  libblkid-2.34-0.2.fc31.x86_64                                                
  libcap-2.26-5.fc30.x86_64                                                    
  libcap-ng-0.7.9-7.fc31.x86_64                                                
  libcom_err-1.45.0-1.fc31.x86_64                                              
  libcurl-7.65.1-1.fc31.x86_64                                                 
  libdb-5.3.28-37.fc30.x86_64                                                  
  libdb-utils-5.3.28-37.fc30.x86_64                                            
  libfdisk-2.34-0.2.fc31.x86_64                                                
  libffi-3.1-20.fc31.x86_64                                                    
  libgcc-9.1.1-2.fc31.x86_64                                                   
  libgcrypt-1.8.4-3.fc30.x86_64                                                
  libgpg-error-1.33-2.fc30.x86_64                                              
  libidn2-2.2.0-1.fc31.x86_64                                                  
  libmetalink-0.1.3-8.fc30.x86_64                                              
  libmount-2.34-0.2.fc31.x86_64                                                
  libnghttp2-1.38.0-1.fc31.x86_64                                              
  libnsl2-1.2.0-4.20180605git4a062cf.fc30.x86_64                               
  libpsl-0.21.0-1.fc31.x86_64                                                  
  libpwquality-1.4.0-12.fc30.x86_64                                            
  libselinux-2.9-2.fc31.x86_64                                                 
  libselinux-utils-2.9-2.fc31.x86_64                                           
  libsemanage-2.9-1.fc31.x86_64                                                
  libsepol-2.9-1.fc31.x86_64                                                   
  libsigsegv-2.11-7.fc30.x86_64                                                
  libsmartcols-2.34-0.2.fc31.x86_64                                            
  libssh-0.8.7-1.fc31.x86_64                                                   
  libtasn1-4.13-7.fc30.x86_64                                                  
  libtirpc-1.1.4-2.rc2.fc30.1.x86_64                                           
  libunistring-0.9.10-5.fc30.x86_64                                            
  libutempter-1.1.6-16.fc30.x86_64                                             
  libuuid-2.34-0.2.fc31.x86_64                                                 
  libverto-0.3.0-7.fc30.x86_64                                                 
  libxcrypt-4.4.6-1.fc31.x86_64                                                
  libxml2-2.9.9-2.fc30.x86_64                                                  
  libzstd-1.4.0-1.fc31.x86_64                                                  
  lua-libs-5.3.5-5.fc30.x86_64                                                 
  lz4-libs-1.8.3-2.fc30.x86_64                                                 
  mpfr-3.1.6-4.fc30.x86_64                                                     
  ncurses-6.1-10.20180923.fc30.x86_64                                          
  ncurses-base-6.1-10.20180923.fc30.noarch                                     
  ncurses-libs-6.1-10.20180923.fc30.x86_64                                     
  openldap-2.4.47-2.fc31.x86_64                                                
  openssl-1:1.1.1c-3.fc31.x86_64                                               
  openssl-libs-1:1.1.1c-3.fc31.x86_64                                          
  p11-kit-0.23.16.1-1.fc31.x86_64                                              
  p11-kit-trust-0.23.16.1-1.fc31.x86_64                                        
  pam-1.3.1-17.fc30.x86_64                                                     
  pcre-8.43-2.fc31.x86_64                                                      
  pcre2-10.33-3.fc31.x86_64                                                    
  popt-1.16-17.fc30.x86_64                                                     
  publicsuffix-list-dafsa-20190417-1.fc31.noarch                               
  readline-8.0-2.fc30.x86_64                                                   
  rpm-4.14.2.1-12.fc31.x86_64                                                  
  rpm-libs-4.14.2.1-12.fc31.x86_64                                             
  sed-4.5-3.fc30.x86_64                                                        
  setup-2.13.3-1.fc31.noarch                                                   
  shadow-utils-2:4.6-14.fc31.x86_64                                            
  systemd-libs-242-3.git7a6d834.fc31.x86_64                                    
  tzdata-2019a-1.fc31.noarch                                                   
  util-linux-2.34-0.2.fc31.x86_64                                              
  whois-nls-5.4.2-2.fc31.noarch                                                
  xz-libs-5.2.4-5.fc30.x86_64                                                  
  zlib-1.2.11-15.fc30.x86_64                                                   

Complete!

$ ls -lZ ~/filesystemtest/
total 60
lrwxrwxrwx.  1 root root system_u:object_r:bin_t:s0           7 Apr 29 14:53 bin -> usr/bin
dr-xr-xr-x.  2 root root system_u:object_r:boot_t:s0       4096 Apr 29 14:53 boot
drwxr-xr-x.  2 root root system_u:object_r:device_t:s0     4096 Jun 14 16:59 dev
drwxr-xr-x. 35 root root system_u:object_r:etc_t:s0        4096 Jun 14 16:59 etc
drwxr-xr-x.  2 root root system_u:object_r:home_root_t:s0  4096 Apr 29 14:53 home
lrwxrwxrwx.  1 root root system_u:object_r:lib_t:s0           7 Apr 29 14:53 lib -> usr/lib
lrwxrwxrwx.  1 root root system_u:object_r:lib_t:s0           9 Apr 29 14:53 lib64 -> usr/lib64
drwxr-xr-x.  2 root root system_u:object_r:mnt_t:s0        4096 Apr 29 14:53 media
drwxr-xr-x.  2 root root system_u:object_r:mnt_t:s0        4096 Apr 29 14:53 mnt
drwxr-xr-x.  2 root root system_u:object_r:usr_t:s0        4096 Apr 29 14:53 opt
dr-xr-xr-x.  2 root root system_u:object_r:default_t:s0    4096 Apr 29 14:53 proc
dr-xr-x---.  2 root root system_u:object_r:admin_home_t:s0 4096 Apr 29 14:53 root
drwxr-xr-x.  5 root root system_u:object_r:var_run_t:s0    4096 Jun 14 16:59 run
lrwxrwxrwx.  1 root root system_u:object_r:bin_t:s0           8 Apr 29 14:53 sbin -> usr/sbin
drwxr-xr-x.  2 root root system_u:object_r:var_t:s0        4096 Apr 29 14:53 srv
dr-xr-xr-x.  2 root root system_u:object_r:sysfs_t:s0      4096 Apr 29 14:53 sys
drwxrwxrwt.  2 root root system_u:object_r:tmp_t:s0        4096 Apr 29 14:53 tmp
drwxr-xr-x. 12 root root system_u:object_r:usr_t:s0        4096 Jun 14 16:58 usr
drwxr-xr-x. 20 root root system_u:object_r:var_t:s0        4096 Jun 14 16:59 var

$ ls -lZ ~/filesystemtest/var
total 72
drwxr-xr-x. 2 root     root     system_u:object_r:var_t:s0            4096 Apr 29 14:53 adm
drwxr-xr-x. 4 root     root     system_u:object_r:var_t:s0            4096 Jun 14 16:58 cache
drwxr-xr-x. 2 root     root     system_u:object_r:system_db_t:s0      4096 Apr 29 14:53 db
drwxr-xr-x. 2 root     root     system_u:object_r:var_t:s0            4096 Apr 29 14:53 empty
drwxr-xr-x. 2 root     root     system_u:object_r:public_content_t:s0 4096 Apr 29 14:53 ftp
drwxr-xr-x. 2 root     root     system_u:object_r:games_data_t:s0     4096 Apr 29 14:53 games
drwxr-xr-x. 3 root     root     system_u:object_r:var_t:s0            4096 Jun 14 16:59 kerberos
drwxr-xr-x. 9 root     root     system_u:object_r:var_lib_t:s0        4096 Jun 14 16:59 lib
drwxr-xr-x. 2 root     root     system_u:object_r:var_t:s0            4096 Apr 29 14:53 local
drwxrwxr-x. 2 vondruch vondruch unconfined_u:object_r:user_home_t:s0  4096 Jun 14 16:57 lock
drwxr-xr-x. 2 root     root     system_u:object_r:var_log_t:s0        4096 Jun 14 16:59 log
lrwxrwxrwx. 1 root     root     system_u:object_r:mail_spool_t:s0       10 Apr 29 14:53 mail -> spool/mail
drwxr-xr-x. 2 root     root     system_u:object_r:var_t:s0            4096 Apr 29 14:53 nis
drwxr-xr-x. 2 root     root     system_u:object_r:var_t:s0            4096 Apr 29 14:53 opt
drwxr-xr-x. 2 root     root     system_u:object_r:var_t:s0            4096 Apr 29 14:53 preserve
drwxrwxr-x. 5 vondruch vondruch unconfined_u:object_r:user_home_t:s0  4096 Jun 14 16:59 run
drwxr-xr-x. 4 root     root     system_u:object_r:var_spool_t:s0      4096 Jun 14 16:58 spool
drwxrwxrwt. 2 root     root     system_u:object_r:tmp_t:s0            4096 Jun 14 16:59 tmp
drwxr-xr-x. 2 root     root     system_u:object_r:var_yp_t:s0         4096 Apr 29 14:53 yp
~~~

As far as I can tell, the SELinux context are the same no matter if restorecon is available or not. Moreover, the /var/{run,lock} has still wrong context. Lets try to fix this manually:

~~~
$ sudo chroot ~/filesystemtest

# restorecon /var/run/

# restorecon /var/lock

# ls -lZ /var/
total 72
drwxr-xr-x. 2 root  root  system_u:object_r:var_t:s0            4096 Apr 29 12:53 adm
drwxr-xr-x. 4 root  root  system_u:object_r:var_t:s0            4096 Jun 14 14:58 cache
drwxr-xr-x. 2 root  root  system_u:object_r:system_db_t:s0      4096 Apr 29 12:53 db
drwxr-xr-x. 2 root  root  system_u:object_r:var_t:s0            4096 Apr 29 12:53 empty
drwxr-xr-x. 2 root  root  system_u:object_r:public_content_t:s0 4096 Apr 29 12:53 ftp
drwxr-xr-x. 2 root  root  system_u:object_r:games_data_t:s0     4096 Apr 29 12:53 games
drwxr-xr-x. 3 root  root  system_u:object_r:var_t:s0            4096 Jun 14 14:59 kerberos
drwxr-xr-x. 9 root  root  system_u:object_r:var_lib_t:s0        4096 Jun 14 14:59 lib
drwxr-xr-x. 2 root  root  system_u:object_r:var_t:s0            4096 Apr 29 12:53 local
drwxrwxr-x. 2 16025 16025 unconfined_u:object_r:user_home_t:s0  4096 Jun 14 14:57 lock
drwxr-xr-x. 2 root  root  system_u:object_r:var_log_t:s0        4096 Jun 14 14:59 log
lrwxrwxrwx. 1 root  root  system_u:object_r:mail_spool_t:s0       10 Apr 29 12:53 mail -> spool/mail
drwxr-xr-x. 2 root  root  system_u:object_r:var_t:s0            4096 Apr 29 12:53 nis
drwxr-xr-x. 2 root  root  system_u:object_r:var_t:s0            4096 Apr 29 12:53 opt
drwxr-xr-x. 2 root  root  system_u:object_r:var_t:s0            4096 Apr 29 12:53 preserve
drwxrwxr-x. 5 16025 16025 unconfined_u:object_r:user_home_t:s0  4096 Jun 14 14:59 run
drwxr-xr-x. 4 root  root  system_u:object_r:var_spool_t:s0      4096 Jun 14 14:58 spool
drwxrwxrwt. 2 root  root  system_u:object_r:tmp_t:s0            4096 Jun 14 14:59 tmp
drwxr-xr-x. 2 root  root  system_u:object_r:var_yp_t:s0         4096 Apr 29 12:53 yp
~~~

It did not heped. My conclusion is that the %posttrans is completely useless, but I might be wrong.

Comment 8 Vít Ondruch 2019-06-14 15:23:32 UTC
BTW this is the LUA version of %posttrans I believe:

~~~
@@ -159,17 +159,26 @@ posix.symlink("../run", "/var/run")
 posix.symlink("../run/lock", "/var/lock")
 return 0
 
-%posttrans
-#we need to restorecon on some dirs created in %pretrans or by other packages
-restorecon /var 2>/dev/null >/dev/null || :
-restorecon /var/run 2>/dev/null >/dev/null || :
-restorecon /var/lock 2>/dev/null >/dev/null || :
-restorecon -r /usr/lib/debug/ 2>/dev/null >/dev/null || :
-restorecon /sys 2>/dev/null >/dev/null || :
-restorecon /boot 2>/dev/null >/dev/null || :
-restorecon /proc 2>/dev/null >/dev/null || :
-restorecon /dev 2>/dev/null >/dev/null || :
-restorecon /media 2>/dev/null >/dev/null || :
+%posttrans -p <lua>
+--#we need to restorecon on some dirs created in %pretrans or by other packages
+
+if posix.access ("/usr/sbin/restorecon", "x") then
+  pid = posix.fork()
+  if pid == 0 then
+    dir = posix.dir("/usr/bin")
+    posix.exec("/usr/sbin/restorecon", "/var")
+    posix.exec("/usr/sbin/restorecon", "/var/run")
+    posix.exec("/usr/sbin/restorecon", "/var/lock")
+    posix.exec("/usr/sbin/restorecon", "-r", "/usr/lib/debug/")
+    posix.exec("/usr/sbin/restorecon", "/sys")
+    posix.exec("/usr/sbin/restorecon", "/boot")
+    posix.exec("/usr/sbin/restorecon", "/proc")
+    posix.exec("/usr/sbin/restorecon", "/dev")
+    posix.exec("/usr/sbin/restorecon", "/media")
+  elseif pid > 0 then
+    posix.wait(pid)
+  end
+end
 
 %files content
 %dir %{_datadir}/filesystem
~~~

Comment 9 Ben Cotton 2020-04-30 21:37:56 UTC
This message is a reminder that Fedora 30 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora 30 on 2020-05-26.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
Fedora 'version' of '30'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 30 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 10 Ben Cotton 2020-08-11 13:02:49 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 33 development cycle.
Changing version to 33.

Comment 12 Ben Cotton 2021-11-04 14:04:28 UTC
This message is a reminder that Fedora 33 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora 33 on 2021-11-30.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
Fedora 'version' of '33'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 33 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 13 Ben Cotton 2021-11-04 14:33:30 UTC
This message is a reminder that Fedora 33 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora 33 on 2021-11-30.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
Fedora 'version' of '33'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 33 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 14 Ben Cotton 2021-11-04 15:31:19 UTC
This message is a reminder that Fedora 33 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora 33 on 2021-11-30.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
Fedora 'version' of '33'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 33 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 15 Ben Cotton 2022-02-08 21:34:12 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 36 development cycle.
Changing version to 36.

Comment 17 Fedora Update System 2022-08-03 13:33:40 UTC
FEDORA-2022-7ea518a8c7 has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2022-7ea518a8c7

Comment 18 Fedora Update System 2022-08-04 02:42:06 UTC
FEDORA-2022-7ea518a8c7 has been pushed to the Fedora 36 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-7ea518a8c7`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-7ea518a8c7

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 19 Fedora Update System 2022-08-05 01:34:48 UTC
FEDORA-2022-7ea518a8c7 has been pushed to the Fedora 36 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 20 Panu Matilainen 2022-08-09 06:44:16 UTC
This is a bit misguided and worse, broken. Reopening.

A %posttrans dependency does not affect installation order at all, and thus does not cause any dependency cycles. But okay, assuming there is case where a shell should not be installed on the system at all, we can certainly use Lua for that. However this is broken - like the C level exec() family of calls, posix.exec() replaces the current process image and never returns except in case of errors, so it'll only ever call restorecon on /var and nothing more:

+if posix.access ("/usr/sbin/restorecon", "x") then
+  local pid = posix.fork()
+  if pid == 0 then
+    posix.exec("/usr/sbin/restorecon", "/var")
+    posix.exec("/usr/sbin/restorecon", "/var/run")
+    posix.exec("/usr/sbin/restorecon", "/var/lock")
[...]


Instead of messing with fork() and all, just call rpm.execute() instead. Something like:

if posix.access ("/usr/sbin/restorecon", "x") then
   rpm.execute(""/usr/sbin/restorecon", "/var")
   rpm.execute("/usr/sbin/restorecon", "/var/run")
   ...
end

(you can also pass multiple directories in one call if you prefer)

Comment 21 Martin Osvald 🛹 2022-08-09 07:08:43 UTC
(In reply to Panu Matilainen from comment #20)
> This is a bit misguided and worse, broken. Reopening.
> 
> A %posttrans dependency does not affect installation order at all, and thus
> does not cause any dependency cycles. But okay, assuming there is case where
> a shell should not be installed on the system at all, we can certainly use
> Lua for that. However this is broken - like the C level exec() family of
> calls, posix.exec() replaces the current process image and never returns
> except in case of errors, so it'll only ever call restorecon on /var and
> nothing more:
> 
> +if posix.access ("/usr/sbin/restorecon", "x") then
> +  local pid = posix.fork()
> +  if pid == 0 then
> +    posix.exec("/usr/sbin/restorecon", "/var")
> +    posix.exec("/usr/sbin/restorecon", "/var/run")

Oh no no, this is a really big mistake from my side. I don't know why I didn't realize that even I know well the exec() does that. I would have had to create a new process for every exec() here.

Big thank you for pointing this out and for the solution.

Comment 23 Fedora Update System 2022-08-09 13:31:36 UTC
FEDORA-2022-214f1f71eb has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2022-214f1f71eb

Comment 24 Fedora Update System 2022-08-09 13:34:47 UTC
FEDORA-2022-214f1f71eb has been pushed to the Fedora 37 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 25 Ben Cotton 2022-08-09 13:37:22 UTC
This bug appears to have been reported against 'rawhide' during the Fedora Linux 37 development cycle.
Changing version to 37.

Comment 26 Fedora Update System 2022-08-09 14:04:15 UTC
FEDORA-2022-85559c423b has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2022-85559c423b

Comment 27 Fedora Update System 2022-08-10 01:38:43 UTC
FEDORA-2022-85559c423b has been pushed to the Fedora 36 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-85559c423b`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-85559c423b

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 28 Fedora Update System 2022-08-12 01:38:09 UTC
FEDORA-2022-85559c423b has been pushed to the Fedora 36 stable repository.
If problem still persists, please make note of it in this bug report.