Bug 1370561

Summary:	selinux-policy-targeted-3.13.1-211.fc26 breaks rawhide composes
Product:	[Fedora] Fedora	Reporter:	Kevin Fenzi <kevin>
Component:	selinux-policy	Assignee:	Lukas Vrabec <lvrabec>
Status:	CLOSED RAWHIDE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	26	CC:	abokovoy, awilliam, dominick.grift, dwalsh, lvrabec, mgrepl, pbrobinson, plautrba, robatino
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	AcceptedBlocker
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-03-02 23:45:37 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1349184

Description Kevin Fenzi 2016-08-26 15:22:04 UTC

Todays rawhide compose failed to build install images at: 

DEBUG util.py:421:  2016-08-26 06:40:33,675: creating the runtime image
DEBUG util.py:421:  creating the runtime image
DEBUG util.py:421:  Traceback (most recent call last):
DEBUG util.py:421:    File "/usr/sbin/lorax", line 273, in <module>
DEBUG util.py:421:      main()
DEBUG util.py:421:    File "/usr/sbin/lorax", line 133, in main
DEBUG util.py:421:      remove_temp=True, verify=opts.verify)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/__init__.py", line 327, in run
DEBUG util.py:421:      size=size)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/treebuilder.py", line 221, in create_runtime
DEBUG util.py:421:      "Anaconda", size=size)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/imgutils.py", line 120, in mkrootfsimg
DEBUG util.py:421:      runcmd(cmd, root=root)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/executils.py", line 341, in runcmd
DEBUG util.py:421:      return execWithRedirect(cmd[0], cmd[1:], **kwargs)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/executils.py", line 228, in execWithRedirect
DEBUG util.py:421:      env_add=env_add, reset_handlers=reset_handlers, reset_lang=reset_lang)[0]
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/executils.py", line 201, in _run_program
DEBUG util.py:421:      raise subprocess.CalledProcessError(proc.returncode, argv, output)
DEBUG util.py:421:  subprocess.CalledProcessError: Command '['setfiles', '-e', '/proc', '-e', '/sys', '-e', '/dev', '-e', '/install', '/etc/selinux/targeted/contexts/files/file_contexts', '/']' returned non-zero exit status 1
DEBUG util.py:546:  Child return code was: 1

and running that on my rawhide laptop gives: 

/etc/selinux/targeted/contexts/files/file_contexts: Multiple different specifications for /var/lib/kubelet(/.*)?  (system_u:object_r:svirt_sandbox_file_t:s0 and system_u:object_r:docker_var_lib_t:s0).
/etc/selinux/targeted/contexts/files/file_contexts: Invalid argument

Looks like a duplicate definition there between selinux-policy and docker-selinux.

Comment 1 Adam Williamson 2016-09-01 18:07:06 UTC

This is an automatic blocker for F26 Alpha: " Bugs which entirely prevent the composition of one or more of the release-blocking images required to be built for a currently-pending (pre-)release " - it breaks the entire compose process. https://fedoraproject.org/wiki/QA:SOP_blocker_bug_process#Automatic_blockers

Comment 2 Kevin Fenzi 2016-09-01 20:41:37 UTC

Note since this causes rawhide composes to fail, I untagged the initial broken one, and just now untagged the newer broken one. 

Tue Aug 23 05:33:40 2016: selinux-policy-3.13.1-210.fc26 tagged into f26 by lvrabec [still active]
Thu Aug 25 06:50:08 2016: selinux-policy-3.13.1-211.fc26 tagged into f26 by lvrabec
Fri Aug 26 11:32:57 2016: selinux-policy-3.13.1-211.fc26 untagged from f26 by kevin
Wed Aug 31 04:29:05 2016: selinux-policy-3.13.1-212.fc26 tagged into f26 by lvrabec
Thu Sep  1 14:40:57 2016: selinux-policy-3.13.1-212.fc26 untagged from f26 by kevin

Comment 3 Alexander Bokovoy 2016-09-03 22:11:48 UTC

The same happens when upgrading to Fedora 25:
  Upgrading   : selinux-policy-devel-3.13.1-211.fc25.noarch                                                                                                         619/2488 
  Upgrading   : docker-selinux-2:1.12.1-9.git2649fe1.fc25.x86_64                                                                                                    620/2488 
/etc/selinux/targeted/contexts/files/file_contexts: Multiple different specifications for /var/lib/kubelet(/.*)?  (system_u:object_r:svirt_sandbox_file_t:s0 and system_u:object_r:docker_var_lib_t:s0).
/etc/selinux/targeted/contexts/files/file_contexts: Invalid argument
libsemanage.semanage_install_final_tmp: setfiles returned error code 1. (No such file or directory).
/etc/selinux/targeted/contexts/files/file_contexts: Multiple different specifications for /var/lib/kubelet(/.*)?  (system_u:object_r:svirt_sandbox_file_t:s0 and system_u:object_r:docker_var_lib_t:s0).
/etc/selinux/targeted/contexts/files/file_contexts: Invalid argument
libsemanage.semanage_install_final_tmp: setfiles returned error code 1. (No such file or directory).
/usr/sbin/semodule:  Failed!

Comment 4 Adam Williamson 2016-09-13 23:53:09 UTC

Lukas says he thinks this scratch build should not have the problem:

http://koji.fedoraproject.org/koji/taskinfo?taskID=15543141

is it possible we can run a test compose with that to check, before he does an official build?

Comment 5 Lukas Vrabec 2016-09-15 16:01:45 UTC

I tested it today, together with the latest docker-selinux rpm package it's working.

Comment 6 Kevin Fenzi 2016-09-15 16:04:53 UTC

Thank you.

Comment 7 Fedora End Of Life 2017-02-28 10:09:45 UTC

This bug appears to have been reported against 'rawhide' during the Fedora 26 development cycle.
Changing version to '26'.

Comment 8 Adam Williamson 2017-03-02 23:45:37 UTC

This was clearly resolved some time ago.