Bug 1622539

Summary: Scriptlet failure in container-selinux
Product: [Fedora] Fedora Reporter: Lukas Slebodnik <lslebodn>
Component: container-selinuxAssignee: Lokesh Mandvekar <lsm5>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 28CC: amurdaca, dwalsh, fkluknav, jchaloup, lsm5
Target Milestone: ---Keywords: Regression
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: container-selinux-2.71-2.git5721d74.fc28 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-09-06 03:09:40 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Lukas Slebodnik 2018-08-27 12:25:24 UTC
Description of problem:
The latest upgrade of container-selinux-2.69-3.git452b90d.fc28 caused failure in installation when the directory /var/lib/containers does not exist.

It causes many installation failures in anaconda and thus broke many tests.

Version-Release number of selected component (if applicable):
container-selinux-2.69-3.git452b90d.fc28

How reproducible:
Deterministic

Steps to Reproduce:
// ensure you have a minimal fedora system without directory /var/lib/containers
// alternative rm -rf /var/lib/containers
1. dnf install -y container-selinux

Actual results:
sh# dnf install -y container-selinux
Last metadata expiration check: 0:32:44 ago on Mon 27 Aug 2018 07:49:50 AM EDT.
Dependencies resolved.
================================================================================
 Package              Arch      Version                        Repository  Size
================================================================================
Installing:
 container-selinux    noarch    2:2.69-3.git452b90d.fc28       updates     44 k

Transaction Summary
================================================================================
Install  1 Package

Total download size: 44 k
Installed size: 37 k
Downloading Packages:
container-selinux-2.69-3.git452b90d.fc28.noarch  66 kB/s |  44 kB     00:00    
--------------------------------------------------------------------------------
Total                                            39 kB/s |  44 kB     00:01     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                        1/1 
  Installing       : container-selinux-2:2.69-3.git452b90d.fc28.noarch      1/1 
  Running scriptlet: container-selinux-2:2.69-3.git452b90d.fc28.noarch      1/1 
warning: %post(container-selinux-2:2.69-3.git452b90d.fc28.noarch) scriptlet failed, exit status 255
Non-fatal POSTIN scriptlet failure in rpm package container-selinux
Non-fatal POSTIN scriptlet failure in rpm package container-selinux
  Verifying        : container-selinux-2:2.69-3.git452b90d.fc28.noarch      1/1 

Installed:
  container-selinux.noarch 2:2.69-3.git452b90d.fc28
Expected results:
//Installation passed without any failures
sh# dnf install -y container-selinux
Last metadata expiration check: 0:34:24 ago on Mon 27 Aug 2018 07:49:50 AM EDT.
Dependencies resolved.
================================================================================
 Package              Arch      Version                        Repository  Size
================================================================================
Installing:
 container-selinux    noarch    2:2.69-3.git452b90d.fc28       updates     44 k

Transaction Summary
================================================================================
Install  1 Package

Total download size: 44 k
Installed size: 37 k
Downloading Packages:
container-selinux-2.69-3.git452b90d.fc28.noarch  20 kB/s |  44 kB     00:02    
--------------------------------------------------------------------------------
Total                                            18 kB/s |  44 kB     00:02     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                        1/1 
  Installing       : container-selinux-2:2.69-3.git452b90d.fc28.noarch      1/1 
  Running scriptlet: container-selinux-2:2.69-3.git452b90d.fc28.noarch      1/1 
  Verifying        : container-selinux-2:2.69-3.git452b90d.fc28.noarch      1/1 

Installed:
  container-selinux.noarch 2:2.69-3.git452b90d.fc28                             

Complete!

Additional info:

Comment 1 Lukas Slebodnik 2018-08-27 12:27:51 UTC
sh# dnf install --rpmverbosity=debug container-selinux
Last metadata expiration check: 0:36:16 ago on Mon 27 Aug 2018 07:49:50 AM EDT.
Dependencies resolved.
================================================================================
 Package              Arch      Version                        Repository  Size
================================================================================
Installing:
 container-selinux    noarch    2:2.69-3.git452b90d.fc28       updates     44 k

Transaction Summary
================================================================================
Install  1 Package

Total download size: 44 k
Installed size: 37 k

//snip

D: adding 14 entries to Requirename index.
D: adding 2 entries to Providename index.
D: adding 2 entries to Obsoletename index.
D: adding 7 entries to Dirnames index.
D: adding 1 entries to Installtid index.
D: adding 1 entries to Sigmd5 index.
D: adding "3f4b5b4a3f1dee84556573253e91a46aabc15266" to Sha1header index.
D: %post(container-selinux-2:2.69-3.git452b90d.fc28.noarch): scriptlet start
D: %post(container-selinux-2:2.69-3.git452b90d.fc28.noarch): execv(/bin/sh) pid 7563
D: Plugin: calling hook scriptlet_fork_post in selinux plugin
D: setexecfilecon: (/bin/sh) 
+ '[' 1 -eq 1 ']'
+ /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1
+ export MODULES=
+ MODULES=
+ for x in container
+ MODULES+=/usr/share/selinux/packages/container.pp.bz2
+ MODULES+=' '
+ /usr/sbin/semodule -n -s targeted -r container
+ /usr/sbin/semodule -n -s targeted -d docker
+ /usr/sbin/semodule -n -s targeted -d gear
+ /usr/sbin/semodule -n -X 200 -s targeted -i /usr/share/selinux/packages/container.pp.bz2
+ /usr/sbin/selinuxenabled
+ /usr/sbin/load_policy
+ /usr/sbin/restorecon -R '/usr/bin/*podman*' /usr/bin/runcon /usr/bin/truncate '/usr/bin/*crio' /usr/bin/docker /usr/bin/docker-current /usr/bin/dockerd-current /usr/bin/docker-storage-setup /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /etc/crio /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker
+ :
+ '[' 1 -eq 1 ']'
+ restorecon -R /var/lib/docker
+ restorecon -R /var/lib/containers
+ :
+ . /etc/selinux/config
++ SELINUX=enforcing
++ SELINUXTYPE=targeted
+ sed -e '\|container_file_t|h; ${x;s|container_file_t||;{g;t};a\' -e container_file_t -e '}' -i /etc/selinux/targeted/contexts/customizable_types
+ matchpathcon -qV /var/lib/containers
+ restorecon -R -v /var/lib/containers
D: %post(container-selinux-2:2.69-3.git452b90d.fc28.noarch): waitpid(7563) rc 7563 status ff00
warning: %post(container-selinux-2:2.69-3.git452b90d.fc28.noarch) scriptlet failed, exit status 255
Non-fatal POSTIN scriptlet failure in rpm package container-selinux
Non-fatal POSTIN scriptlet failure in rpm package container-selinux
fdio:       6 reads,    21128 total bytes in 0.000016 secs
  Verifying        : container-selinux-2:2.69-3.git452b90d.fc28.noarch      1/1 

Installed:
  container-selinux.noarch 2:2.69-3.git452b90d.fc28                             

Complete!

Comment 2 Fedora Update System 2018-08-27 13:43:16 UTC
container-selinux-2.71-2.git5721d74.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-0cd1b5be98

Comment 3 Fedora Update System 2018-08-28 10:50:51 UTC
container-selinux-2.71-2.git5721d74.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-0cd1b5be98

Comment 4 Fedora Update System 2018-09-06 03:09:40 UTC
container-selinux-2.71-2.git5721d74.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.