Bug 1377205

Summary: RHVH 40_73: An unknown error occurs during anaconda interactive installation on local disk machine when Security Policy is getting configured
Product: Red Hat Enterprise Linux 7 Reporter: cshao <cshao>
Component: oscap-anaconda-addonAssignee: Martin Preisler <mpreisle>
Status: CLOSED CURRENTRELEASE QA Contact: Release Test Team <release-test-team-automation>
Severity: high Docs Contact:
Priority: high    
Version: 7.3CC: bugs, cshao, dguo, fdeutsch, huzhao, jiawu, leiwang, mhaicman, openscap-maint, rbarry, weiwang, yaniwang, ycui, yzhao
Target Milestone: pre-dev-freeze   
Target Release: 7.4   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-11-09 11:03:56 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1329957    
Attachments:
Description Flags
anaconda-error
none
all log info + ks
none
grub.png
none
uefi_all_log none

Description cshao 2016-09-19 08:03:59 UTC
Created attachment 1202333 [details]
anaconda-error

Description of problem:
An unknown error occurs during anaconda interactive installation on local disk machine.

=============================================================
13:17:09,670 INFO anaconda: Configuring addons
13:17:13,148 DEBUG anaconda: running handleException
13:17:13,151 CRIT anaconda: Traceback (most recent call last):

  File "/usr/lib64/python2.7/site-packages/pyanaconda/threads.py", line 227, in run
    threading.Thread.run(self, *args, **kwargs)

  File "/usr/lib64/python2.7/threading.py", line 764, in run
    self.__target(*self.__args, **self.__kwargs)

  File "/usr/lib64/python2.7/site-packages/pyanaconda/install.py", line 104, in doConfiguration
    ksdata.addons.execute(storage, ksdata, instClass, u, payload)

  File "/usr/lib64/python2.7/site-packages/pyanaconda/addons.py", line 88, in execute
    v.execute(storage, ksdata, instClass, users, payload)

  File "/usr/share/anaconda/addons/org_fedora_oscap/ks/oscap.py", line 543, in execute
    self.postinst_tailoring_path, chroot=getSysroot())

  File "/usr/share/anaconda/addons/org_fedora_oscap/common.py", line 231, in run_oscap_remediate
    raise OSCAPaddonError(msg)

OSCAPaddonError: Content evaluation and remediation with the oscap tool failed: WARNING: Skipping http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml file which is referenced from XCCDF content
WARNING: Skipping http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml file which is referenced from XCCDF content


13:17:13,151 DEBUG anaconda: Gtk running, queuing exception handler to the main loop
13:17:13,152 INFO anaconda: Thread Done: AnaConfigurationThread (140466392377088)
13:17:16,352 INFO anaconda: Running kickstart %%traceback script(s)
13:17:16,352 INFO anaconda: All kickstart %%traceback script(s) have been run
=============================================================


Version-Release number of selected component (if applicable):
redhat-virtualization-host-4.0-20160912.1
kernel-3.10.0-493.el7.x86_64
imgbased-0.8.4-1.el7ev.noarch

How reproducible:
30%

Steps to Reproduce:
1. Anaconda interactive install RHVH on local machine via ks file in attachment. 
2. Set correct date, keyboard, language, disk, network and so on.
3. Focus on the installation process.

Actual results:
An unknown error occurs during anaconda interactive installation on local disk machine.

Expected results:
Anaconda interactive install RHVH on local machine can successful without error.

Additional info:
We used RHEL 7.3 Beta tree for testing because no available initrd.img for RHV at present.

Comment 1 cshao 2016-09-19 08:07:15 UTC
Created attachment 1202338 [details]
all log info + ks

Comment 2 Ryan Barry 2016-09-19 15:27:19 UTC
Can you try with https://bugzilla.redhat.com/show_bug.cgi?id=1373387#c9 ?

Comment 3 cshao 2016-09-20 08:07:39 UTC
(In reply to Ryan Barry from comment #2)
> Can you try with https://bugzilla.redhat.com/show_bug.cgi?id=1373387#c9 ?

After add below partitioning section to ks, the auto installation can successful. But seem it can't affect the anaconda interactive installation.


reqpart --add-boot
part pv.01 --size=42000 --grow
volgroup HostVG pv.01
logvol swap --vgname=HostVG --name=swap --fstype=swap --recommended
logvol none --vgname=HostVG --name=HostPool --thinpool --size=40000 --grow
logvol /    --vgname=HostVG --name=root --thin --poolname=HostPool --fsoptions="defaults,discard" --size=6000
logvol /var --vgname=HostVG --name=var  --thin --poolname=HostPool --fsoptions="defaults,discard" --size=15000

1, Grub info can show correctly(see attachment "grub.png")
2. imgbase w -> pass
imgbase check -> pass
imgbase layout -> pass

# imgbase w
[INFO] You are on rhvh-4.0-0.20160912.0+1

# imgbase check
Status: OK
Mount points ... OK
  Separate /var ... OK
  Discard is used ... OK
Basic storage ... OK
  Initialized VG ... OK
  Initialized Thin Pool ... OK
  Initialized LVs ... OK
Thin storage ... OK
  Checking available space in thinpool ... OK
  Checking thinpool auto-extend ... OK

# imgbase layout
rhvh-4.0-0.20160912.0
 +- rhvh-4.0-0.20160912.0+1

Comment 4 cshao 2016-09-20 08:08:16 UTC
Created attachment 1202765 [details]
grub.png

Comment 5 Ryan Barry 2016-09-30 15:47:57 UTC
Can you please test this on the 7.3 distill?

Comment 6 cshao 2016-10-08 09:47:28 UTC
(In reply to Ryan Barry from comment #5)
> Can you please test this on the 7.3 distill?

Still can reproduce this issue, seem it is related with "Security Policy" setting.
No such issue if we don't select any security policy.


Test version:
redhat-virtualization-host-4.0-20161007.0
RHVH-4.0-20161007.0-RHVH-x86_64-dvd1.iso
imgbased-0.8.5-0.1.el7ev.noarch

Comment 7 cshao 2016-10-08 09:48:19 UTC
Created attachment 1208312 [details]
uefi_all_log

Comment 8 cshao 2016-10-08 10:16:15 UTC
I guess I found the problem ~ Security Policy.
If user select Security Policy, then the bug occurs.
No such issue if we don't select any security policy.

Test version:
redhat-virtualization-host-4.0-20161007.0
RHVH-4.0-20161007.0-RHVH-x86_64-dvd1.iso
imgbased-0.8.5-0.1.el7ev.noarch

How reproducible:
100%

Test steps:
1. Anaconda interactive install RHVH on machine via iso.
2. Set correct date, keyboard, language, disk, network and so on.
3. Enter Security policy page, select "Pre-release Draft STIG for Red Hat Enterprise Linux 7 Server" profile.
4. Continue the installation and focus on the installation process.

Test result:
The original error occurs during anaconda interactive installation.

So assigned this bug.

Comment 9 Red Hat Bugzilla Rules Engine 2016-10-08 10:16:22 UTC
Target release should be placed once a package build is known to fix a issue. Since this bug is not modified, the target version has been reset. Please use target milestone to plan a fix for a oVirt release.

Comment 10 Ryan Barry 2016-10-11 13:24:57 UTC
Reassigning to Anaconda, since this is outside the scope of RHV.

Comment 12 Samantha N. Bueno 2016-11-18 02:38:24 UTC
This looks specific to the oscap add-on, so reassigning for them to investigate.

Comment 13 Martin Preisler 2017-03-27 14:52:36 UTC
We were resource constrained and couldn't fix this in time for 7.4.0. Either we need blocker+ or we have to postpone until 7.5.0.

Comment 14 cshao 2017-11-09 11:03:56 UTC
Test version:
RHVH-4.1-20171106.0-RHVH-x86_64-dvd1.iso

Test result:
RHVH installation can succeed during anaconda interactive installation on local disk machine when Security Policy is getting configured

So close this bug as CURRENTRELEASE