Bug 1785443

Summary: Failed to generate binary /usr/sbin/semodule: Failed!
Product: [Fedora] Fedora Reporter: customercare
Component: selinux-policyAssignee: Lukas Vrabec <lvrabec>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: low    
Version: 30CC: dwalsh, lvrabec, mgrepl, plautrba, stewart_whitman, zpytela
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-01-09 21:21:40 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Log: selinux-policy-targeted fails without container-selinux none

Description customercare 2019-12-19 21:24:43 UTC
Description of problem:

while upgrading a system to fc30, this came up:

  executed Scriptlet: selinux-policy-targeted-3.14.3-53.fc30.noarch                                                                                                                                                                                                604/2440 
Conflicting name type transition rules
Binary policy creation failed at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1780
Failed to generate binary
/usr/sbin/semodule:  Failed!

  upgrading         : dbus-tools-1:1.12.16-1.fc30.x86_64   


Version-Release number of selected component (if applicable):

3.14.3-53


info:

used command:

dnf --allowerasing --releasever=30 --setopt=deltarpm=false distro-sync

Comment 1 customercare 2019-12-19 21:32:09 UTC
Later in the upgradeprocess....

  Ausgeführtes Scriptlet: dbus-broker-21-3.fc30.x86_64                                                                                                                                                                                                                 526/2297 
  Installieren          : dbus-broker-21-3.fc30.x86_64                                                                                                                                                                                                                 526/2297 
  Ausgeführtes Scriptlet: dbus-broker-21-3.fc30.x86_64                                                                                                                                                                                                                 526/2297 
chcon: ungültiger Kontext: „system_u:object_r:init_exec_t:s0“: No such file or directory

  Aktualisieren         : systemd-bootchart-233-4.fc30.x86_64                                                                                                                                                                                                          527/2297 
  Ausgeführtes Scriptlet: systemd-bootchart-233-4.fc30.x86_64                                                                                                                                                                                                          527/2297 
  Ausgeführtes Scriptlet: systemd-udev-241-12.git323cdf4.fc30.x

Comment 2 customercare 2019-12-19 21:34:29 UTC
different server upgrade:


  Aktualisieren         : selinux-policy-targeted-3.14.3-53.fc30.noarch                                                                                                                                                                                                558/2297 
  Ausgeführtes Scriptlet: selinux-policy-targeted-3.14.3-53.fc30.noarch                                                                                                                                                                                                558/2297 
                                                                                    
Conflicting name type transition rules
Binary policy creation failed at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1780
Failed to generate binary
/usr/sbin/semodule:  Failed!

  Aktualisieren         : dbus-tools-1:1.12.16-1.fc30.x86_64                                                                                                                                                                                                           559/2297 
  Aktualisieren         : iputils-20180629-4.fc30.x86_64                                                                                                                                                                                                               560/2297 
  Ausgeführtes Scriptlet: iputils-20180629-4.fc30.x86_64

Comment 3 Stew 2019-12-21 16:39:30 UTC
Created attachment 1647037 [details]
Log: selinux-policy-targeted fails without container-selinux

Got a very similar error. This is on a raspberry pi with FC30 (without any container packages). I had to install the container-selinux package to get past the binary policy creation failure.

I attached a commented log.

Maybe there's a missing package dependency.

Comment 4 Lukas Vrabec 2020-01-09 21:21:40 UTC

*** This bug has been marked as a duplicate of bug 1782225 ***