Bug 2210269

Summary: ValueError: SELinux policy is not managed or store cannot be accessed. [rhel-9.2.0.z]
Product: Red Hat Enterprise Linux 9 Reporter: RHEL Program Management Team <pgm-rhel-tools>
Component: insights-clientAssignee: Pino Toscano <ptoscano>
Status: CLOSED ERRATA QA Contact: Red Hat subscription-manager QE Team <rhsm-qe>
Severity: high Docs Contact:
Priority: urgent    
Version: 9.2CC: ahitacat, arpandey, cmarinea, dranck, fjansen, jcastran, jstodola, link, mmalik, nobody, pakotvan, redakkan, stomsa, zzwxh123
Target Milestone: rcKeywords: Regression, Triaged, ZStream
Target Release: 9.2   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: insights-client-3.1.7-12.1.el9_2 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 2196844 Environment:
Last Closed: 2023-06-21 14:39:43 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2196844    
Bug Blocks:    

Comment 2 Archana Pandey 2023-05-29 15:02:53 UTC
verifying the build against 9.2.z

Beaker Test information:
                         HOSTNAME=kvm-06-guest38.hv2.lab.eng.bos.redhat.com
                            JOBID=7902541
                         RECIPEID=13987812
                    RESULT_SERVER=
                           DISTRO=RHEL-9.2.0-updates-20230529.d.14
                     ARCHITECTURE=x86_64

>> Reproducing issue-
[root@kvm-06-guest38 ~]# insights-client --version
Client: 3.1.7
Core: 3.0.302-1
[root@kvm-06-guest38 ~]# 
[root@kvm-06-guest38 ~]#  rpm -qa | grep insight
insights-client-3.1.7-12.el9.noarch
[root@kvm-06-guest38 ~]# mkdir /root/installroot
[root@kvm-06-guest38 ~]# yum install --installroot=/root/installroot/ insights-client
Unable to detect release version (use '--releasever' to specify release version)
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

beaker-AppStream                                                                                                                                               38 MB/s | 6.3 MB     00:00    
beaker-AppStream-debuginfo                                                    
:
:
:
  Installing       : insights-client-3.1.7-12.el9.noarch                                                                                                                              145/145 
  Running scriptlet: insights-client-3.1.7-12.el9.noarch                                                                                                                              145/145 
⚠️ /proc/ is not mounted. This is not a supported mode of operation. Please fix
your invocation environment to mount /proc/ and /sys/ properly. Proceeding anyway.
Your mileage may vary.
⚠️ /proc/ is not mounted. This is not a supported mode of operation. Please fix
your invocation environment to mount /proc/ and /sys/ properly. Proceeding anyway.
Your mileage may vary.
Created symlink /etc/systemd/system/multi-user.target.wants/insights-client-boot.service → /usr/lib/systemd/system/insights-client-boot.service.
ValueError: SELinux policy is not managed or store cannot be accessed.
warning: %post(insights-client-0:3.1.7-12.el9.noarch) scriptlet failed, exit status 1

Error in POSTIN scriptlet in rpm package insights-client
  Running scriptlet: filesystem-3.16-2.el9.x86_64          

Issue reproduced as ValueError exist.

>> verifying on brew build- insights-client-3.1.7-12.1.el9_2.noarch.rpm
[root@kvm-06-guest38 ~]# mkdir /root/installroot2
[root@kvm-06-guest38 tmp]# yum install --installroot=/root/installroot2/ /tmp/insights-client-3.1.7-12.1.el9_2.noarch.rpm 
Unable to detect release version (use '--releasever' to specify release version)
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

beaker-AppStream                                                                                                                                               46 MB/s | 6.3 MB     00:00    
beaker-AppStream-debuginfo                                                                                                                                     43 MB/s | 5.3 MB     00:00    
beaker-BaseOS           
:
:
:
Installing       : insights-client-3.1.7-12.1.el9_2.noarch                                                                                                                          145/145 
  Running scriptlet: insights-client-3.1.7-12.1.el9_2.noarch                                                                                                                          145/145 
⚠️ /proc/ is not mounted. This is not a supported mode of operation. Please fix
your invocation environment to mount /proc/ and /sys/ properly. Proceeding anyway.
Your mileage may vary.
⚠️ /proc/ is not mounted. This is not a supported mode of operation. Please fix
your invocation environment to mount /proc/ and /sys/ properly. Proceeding anyway.
Your mileage may vary.
Created symlink /etc/systemd/system/multi-user.target.wants/insights-client-boot.service → /usr/lib/systemd/system/insights-client-boot.service.

  Running scriptlet: filesystem-3.16-2.el9.x86_64                                                                                                                                     145/145 
  Running scriptlet: ca-certificates-2022.2.54-90.2.el9_0.noarch                                                                                                                      145/145 
  Running scriptlet: rpm-4.16.1.3-22.el9.x86_64                                                                                                                                       145/145 
  Running scriptlet: insights-client-3.1.7-12.1.el9_2.noarch                                                                                                                          145/145 
  Verifying        : checkpolicy-3.5-1.el9.x86_64                       
:
:
:
Complete!

[root@kvm-06-guest38 tmp]# rpm -qa --root=/root/installroot2/ insights-client
insights-client-3.1.7-12.1.el9_2.noarch
[root@kvm-06-guest38 tmp]# 



Verification: Successfully verified that ValueError does not exist in scratch build.
Based on above observations setting verified:Tested

Comment 5 Archana Pandey 2023-06-07 14:15:10 UTC
Final Verification :

Beaker Test information:
                         HOSTNAME=kvm-08-guest08.hv2.lab.eng.bos.redhat.com
                            JOBID=7943192
                         RECIPEID=14045976
                    RESULT_SERVER=
                           DISTRO=RHEL-9.2.0-updates-20230607.4
                     ARCHITECTURE=x86_64


[root@kvm-08-guest08 ~]# insights-client --version
Client: 3.1.7
Core: 3.0.302-1
[root@kvm-08-guest08 ~]# rpm -qa insights-client
insights-client-3.1.7-12.1.el9_2.noarch

[root@kvm-08-guest08 ~]# mkdir /root/installroot

[root@kvm-08-guest08 ~]# yum install --installroot=/root/installroot insights-client
Unable to detect release version (use '--releasever' to specify release version)
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

beaker-AppStream                                                                                                                                               12 MB/s | 6.3 MB     00:00    
beaker-AppStream-debuginfo                                                                                                                                     43 MB/s | 5.3 MB     00:00    
beaker-BaseOS                                                                                                                                                  20 MB/s | 1.7 MB     00:00    
Dependencies resolved.
==============================================================================================================================================================================================
 Package                                                Architecture                     Version                                             Repository                                  Size
==============================================================================================================================================================================================
Installing:
 insights-client                                        noarch                           3.1.7-12.1.el9_2                                    beaker-AppStream                           1.2 M
Installing dependencies:
 acl                                  
:
:
:
:
:
Installing       : policycoreutils-python-utils-3.5-1.el9.noarch                                                                                                                    144/145 
  Installing       : insights-client-3.1.7-12.1.el9_2.noarch                                                                                                                          145/145 
  Running scriptlet: insights-client-3.1.7-12.1.el9_2.noarch                                                                                                                          145/145 
⚠️ /proc/ is not mounted. This is not a supported mode of operation. Please fix
your invocation environment to mount /proc/ and /sys/ properly. Proceeding anyway.
Your mileage may vary.
⚠️ /proc/ is not mounted. This is not a supported mode of operation. Please fix
your invocation environment to mount /proc/ and /sys/ properly. Proceeding anyway.
Your mileage may vary.
Created symlink /etc/systemd/system/multi-user.target.wants/insights-client-boot.service → /usr/lib/systemd/system/insights-client-boot.service.

  Running scriptlet: filesystem-3.16-2.el9.x86_64                                                                                                                                     145/145 
  Running scriptlet: ca-certificates-2022.2.54-90.2.el9_0.noarch                                                                                                                      145/145 
  Running scriptlet: rpm-4.16.1.3-22.el9.x86_64                                                                                                                                       145/145 
  Running scriptlet: insights-client-3.1.7-12.1.el9_2.noarch                                                                                                                          145/145 
  Verifying        : checkpolicy-3.5-1.el9.x86_64                                                                                                                                       1/145 
  Verifying        : gawk-all-langpacks-5.1.0-6.el9.x86_64                                                                                                                              2/145 
  Verifying        : insights-client-3.1.7-12.1.el9_2.noarch                                                                                                                            3/145 
  Verifying        : libxcrypt-compat-4.4.18-3.el9.x86_64                                                                                                                               4/145 
  Verifying        : policycoreutils-python-util
:
:
:
Complete!
[root@kvm-08-guest08 ~]# rpm -qa --root=/root/installroot/ insights-client
insights-client-3.1.7-12.1.el9_2.noarch
[root@kvm-08-guest08 ~]# 

Passed: Successfully verified that ValueError does not exist in scratch build.

Comment 9 errata-xmlrpc 2023-06-21 14:39:43 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (insights-client bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:3718