Created attachment 1314546[details]
audit.log
openQA test "support-server" is failing for Rawhide (FC27) for ppc64le arch
The reported failure message is not very helpfull
===
$systemctl restart tgtd.service
Job for tgtd.service failed because the control process exited with error code.
See "systemctl status tgtd.service" and "journalctl -xe" for details
===
I do not know if the cause of the tgtd start failure is the captured avc error
as reported by grep output:
===
$grep -Hnr tgtd ./
Binary file ./var/log/journal/8c561ef33348404ca50122b47f1f4d79/system.journal matches
./var/log/audit/audit.log:137:type=AVC msg=audit(1502889862.910:213): avc: denied { create } for pid=1168 comm="tgtd" name="tgtd" scontext=system_u:system_r:tgtd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=0
./var/log/audit/audit.log:138:type=SERVICE_START msg=audit(1502889867.916:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tgtd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
===
$sudo journalctl -u tgtd --directory var/log/journal/8c561ef33348404ca50122b47f1f4d79/
-- Logs begin at Wed 2017-08-16 09:21:40 EDT, end at Wed 2017-08-16 09:24:49 EDT. --
Aug 16 09:24:22 support.domain.local systemd[1]: Starting tgtd iSCSI target daemon...
Aug 16 09:24:22 support.domain.local tgtd[1168]: (null): ipc_init(781) failed to open lock file for management IPC
Aug 16 09:24:22 support.domain.local systemd[1]: tgtd.service: Main process exited, code=exited, status=1/FAILURE
Aug 16 09:24:27 support.domain.local tgtadm[1170]: tgtadm: failed to send request hdr to tgt daemon, Transport endpoint is not connected
Aug 16 09:24:27 support.domain.local systemd[1]: tgtd.service: Control process exited, code=exited status=107
Aug 16 09:24:27 support.domain.local systemd[1]: Failed to start tgtd iSCSI target daemon.
Aug 16 09:24:27 support.domain.local systemd[1]: tgtd.service: Unit entered failed state.
Aug 16 09:24:27 support.domain.local systemd[1]: tgtd.service: Failed with result 'exit-code'.
===
Created attachment 1380941[details]
Workaround for tgtd avc denial issue
I ran into this issue on F26 after patching and there seems to be no fix available from dnf.
So in case anyone else wants this resolved immediately here is how I did it, with the help of grift in #fedora irc channel on freenode network.
1. Download the file tgtd_bug1482382.cil
2. Run sudo semodule -i tgtd_bug1482382.cil
3. Restart tgtd service
Created attachment 1314546 [details] audit.log openQA test "support-server" is failing for Rawhide (FC27) for ppc64le arch The reported failure message is not very helpfull === $systemctl restart tgtd.service Job for tgtd.service failed because the control process exited with error code. See "systemctl status tgtd.service" and "journalctl -xe" for details === I do not know if the cause of the tgtd start failure is the captured avc error as reported by grep output: === $grep -Hnr tgtd ./ Binary file ./var/log/journal/8c561ef33348404ca50122b47f1f4d79/system.journal matches ./var/log/audit/audit.log:137:type=AVC msg=audit(1502889862.910:213): avc: denied { create } for pid=1168 comm="tgtd" name="tgtd" scontext=system_u:system_r:tgtd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=0 ./var/log/audit/audit.log:138:type=SERVICE_START msg=audit(1502889867.916:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tgtd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' === $sudo journalctl -u tgtd --directory var/log/journal/8c561ef33348404ca50122b47f1f4d79/ -- Logs begin at Wed 2017-08-16 09:21:40 EDT, end at Wed 2017-08-16 09:24:49 EDT. -- Aug 16 09:24:22 support.domain.local systemd[1]: Starting tgtd iSCSI target daemon... Aug 16 09:24:22 support.domain.local tgtd[1168]: (null): ipc_init(781) failed to open lock file for management IPC Aug 16 09:24:22 support.domain.local systemd[1]: tgtd.service: Main process exited, code=exited, status=1/FAILURE Aug 16 09:24:27 support.domain.local tgtadm[1170]: tgtadm: failed to send request hdr to tgt daemon, Transport endpoint is not connected Aug 16 09:24:27 support.domain.local systemd[1]: tgtd.service: Control process exited, code=exited status=107 Aug 16 09:24:27 support.domain.local systemd[1]: Failed to start tgtd iSCSI target daemon. Aug 16 09:24:27 support.domain.local systemd[1]: tgtd.service: Unit entered failed state. Aug 16 09:24:27 support.domain.local systemd[1]: tgtd.service: Failed with result 'exit-code'. ===