Description of problem:
With SELinux enabled ("SELINUX=enforcing" in /etc/selinux/config), the boot process with all the Fedora ("plain-vanilla") kernels with are installed on the system hangs forever. All partitions except /boot encrypted with LUKS.
Self compiled kernels (from kernel.org) work always.
The boot process shows several errors before it completely hangs, for example:
"Start create static device nodes in /dev failed"
at the end:
""A start job is running for [luks-encrypted device] ..."
which runs forever.
Setting SELinux in permissive mode, then booting and waiting for the relabeling, then booting again works also for the Fedora kernels, even when setting SELinux back to enforcing mode. I suspect that the relabeling during the boot process fails if some files have been modified in the meantime while working under a self compiled kernel.
Version-Release number of selected component (if applicable):
(hope my guess is right)
The system consists of a 60GB SSD HDD, partitioned into:
and a separate HDD with the /home partition on it, also LUKS-encrypted.
So far every boot with a Fedora kernel, currently kernel-3.15.4-200.fc20.x86_64, before the "permissive" mode let the boot process relabel the system.
Steps to Reproduce:
1. Boot the system with a Fedora kernel
2. System hangs with last message: "A start job is running for [luks-encryted device]".
System should always boot properly, also when one switches between different kernels from one session to the other.
I cannot add the detailed boot messages because I do not know how or where to find it. "journalctl" does not show the failed boots.
Do you get AVC msgs if you boot in permissive mode?
Sorry, not sure what AVC messages are. Googled it, if you mean messages from auditd, then no, I did not notice any.
I just booted the system again with a Fedora kernel to check boot.log, and something interesting happened: I had the system up with a self compiled kernel again, then rebooted with a Fedora kernel (in enforcing mode) to check for boot messages. Now the system relabels the file system without any problem, no error messages, and boots normally.
Now changed to permissive mode again and rebooted, but same --> boots normally. Also tried an older fedora kernel (3.15.3) --> OK. (but I do not believe it was a kernel problem)
So it seems to work normally again. Nevertheless, something must have prevented the normal boot before. Only I cannot reproduce it anymore.
Sorry for this, but: just because it works now does not, in my humble opinion, mean that there is no bug. It did not work for several days. Something must have definitely prevented my system from booting normally. Maybe somebody else will have this problem with encrypted disks, too!? I also admit that I do not really have a clue about SELinux, I just came across it at all because it is built into Fedora. Nevertheless, thank you for taking my case into consideration. Best regards, Patrick
(In reply to Patrick Proche from comment #3)
> Sorry for this, but: just because it works now does not, in my humble
> opinion, mean that there is no bug. It did not work for several days.
> Something must have definitely prevented my system from booting normally.
> Maybe somebody else will have this problem with encrypted disks, too!? I
> also admit that I do not really have a clue about SELinux, I just came
> across it at all because it is built into Fedora. Nevertheless, thank you
> for taking my case into consideration. Best regards, Patrick
Yeap. Basically lets reopen the bug if you get it again. Hard to find an issue if it works now.