RDO tickets are now tracked in Jira https://issues.redhat.com/projects/RDO/issues/
Bug 1154866 - latest yum update for RHEL6.5 installs selinux-policy package which conflicts openstack-selinux installed later
Summary: latest yum update for RHEL6.5 installs selinux-policy package which conflic...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: RDO
Classification: Community
Component: openstack-selinux
Version: unspecified
Hardware: x86_64
OS: Linux
unspecified
urgent
Target Milestone: ---
: Icehouse
Assignee: Lon Hohberger
QA Contact: Ofer Blaut
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-10-20 21:25 UTC by Zvi Dubitzky
Modified: 2016-03-30 23:07 UTC (History)
13 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-10-21 13:18:57 UTC
Embargoed:


Attachments (Terms of Use)

Description Zvi Dubitzky 2014-10-20 21:25:34 UTC
Description of problem:
latest yum update for RHEL6.5 (starting approx. 10/14)   installs selinux-policy package which conflicts openstack-selinux installed later

Version-Release number of selected component (if applicable):
RHEL6.5

How reproducible:
see steps below

Steps to Reproduce:
1. install RHEL6.5 
2. register to RHN
3. yum update
4. yum install opensatck-selinux  (as part of openstack installation)

Actual results:

later activity of openstack is not ok

Expected results:
------------------
On previous RHEL6.5 + yum update (prior to 10/14) we do not see 
selinux-policy-3.7.19-260.el6.noarch  installed 

Additional info:

Comment 2 Milos Malik 2014-10-21 07:25:03 UTC
Could you be more specific? What kind of conflict do you see?
 * policy package
 * unsatisfied RPM requires

Comment 4 Lon Hohberger 2014-10-21 13:18:57 UTC
When using the current release of RHEL OSP on RHEL 6.5 (which is not the current release of RHEL any more), you must preinstall openstack-selinux-0.1.3-2.el6ost prior to running packstack.

Comment 5 Lon Hohberger 2014-10-21 13:20:25 UTC
My apologies, for RHEL OSP 4:

  yum install openstack-selinux-0.1.3-2.el6ost

For RHEL OSP 5:

  yum install openstack-selinux-0.1.4-2.el6ost

Comment 6 Lon Hohberger 2014-10-21 13:21:56 UTC
Later versions of openstack-selinux resolve a conflict with the swift module found in RHEL 6.6, so it's not possible to use openstack-selinux-0.1.5-5.el6ost on RHEL 6.5 and still have Swift work.

Comment 7 Lon Hohberger 2014-10-21 13:26:06 UTC
Alternatively, I believe you may also install the selinux-policy package from RHEL 6.6 (but not upgrade the rest of the system to 6.6).

Comment 8 Zvi Dubitzky 2014-10-21 16:50:18 UTC
I do not see yet why the latest 'yum update' install selinux-policy-3.7.19-260.el6.noarch   while I did not see it installed on prior to 10/14/2014 
updates . It conflicts with  install of openstack-selinux-0.1.3-2.el6ost

Like below scenario that you requested :

Doing : yum install openstack-selinux    we get

.....:

Dependencies Resolved

===========================================================================================================================================
 Package                               Arch                  Version                             Repository                           Size
===========================================================================================================================================
Installing:
 openstack-selinux                     noarch                0.1.3-3.ibm.el6                     ibmos-noarch                         47 k
Installing for dependencies:
 audit-libs-python                     x86_64                2.3.7-5.el6                         rhel-x86_64-server-6                 62 k
 libsemanage-python                    x86_64                2.0.43-4.2.el6                      rhel-x86_64-server-6                 81 k
 policycoreutils-python                x86_64                2.0.83-19.47.el6_6.1                rhel-x86_64-server-6                346 k
 setools-libs                          x86_64                3.3.7-4.el6                         rhel-x86_64-server-6                400 k
 setools-libs-python                   x86_64                3.3.7-4.el6                         rhel-x86_64-server-6                222 k

Transaction Summary
===========================================================================================================================================
Install       6 Package(s)

Total size: 1.1 M
Installed size: 4.2 M
Is this ok [y/N]: y
Downloading Packages:
Running rpm_check_debug
Running Transaction Test


Transaction Check Error:
  file /usr/share/selinux/devel/include/services/swift.if from install of openstack-selinux-0.1.3-3.ibm.el6.noarch conflicts with file from package selinux-policy-3.7.19-260.el6.noarch

Error Summary

Comment 9 Ryan Martin 2014-10-26 02:53:00 UTC
I'm having the same issue. I'm getting OpenStack Havana on RHEL 6.5 from http://repos.fedorapeople.org/repos/openstack/openstack-havana/epel-6/ and there's no openstack-selinux-0.1.4-2.el6ost.rpm there. The latest version is 0.1.3-2, and that's the conflicting version. If an updated package exists, where can we get it?

Comment 11 Lon Hohberger 2014-11-12 15:35:14 UTC
Oh, ok.  So, this isn't against RHEL OSP at all.

The RDO policy needs to be resynced to included both of the newer versions.

I don't know where the openstack-selinux-0.1.3-0.1.3-3.ibm.el6 came from, it's neither part of RDO nor RHOS.

Comment 12 Lon Hohberger 2014-11-12 15:42:41 UTC
I noticed these two package versions are missing in RDO/Icehouse:

  openstack-selinux-0.1.4-2.el6ost (For RHEL 6.5's selinux-policy)
  openstack-selinux-0.1.5-5.el6ost (For RHEL 6.6's selinux-policy)

And this one is missing in RDO/Havana:

  openstack-selinux-0.1.5-5.el6ost (For RHEL 6.6's selinux-policy)

We'll work on updating those.

Comment 14 Joe R 2014-11-19 22:10:49 UTC
Hi everyone,

I am seeing the same issue trying to install OpenStack Grizzly on RHEL 6.6. After running packstack --allinone I get the following error in the log file:

Error Summary
-------------

^[[0m
^[[1;31mError: /Stage[main]//Package[openstack-selinux]/ensure: change from absent to present failed: Execution of '/usr/bin/yum -d 0 -e 0 -y install openstack-selinux' returned 1:

Transaction Check Error:
  file /usr/share/selinux/devel/include/services/swift.if from install of openstack-selinux-0.1.2-10.el6ost.noarch conflicts with file from package selinux-policy-3.7.19-260.el6.noarch


This is blocking my deployment of the environment and I need to test with Grizzly specifically. Is there a solution to this problem? If not, is there a workaround I can do? Please help as soon as possible.

Thank you very much in advance.
-Joe

Comment 15 Richard Plourde 2014-11-24 16:12:41 UTC
I am having the same issue:

yum install openstack-selinux

...
Transaction Check Error:
  file /usr/share/selinux/devel/include/services/swift.if from install of openstack-selinux-0.1.3-2.el6ost.noarch conflicts with file from package selinux-policy-3.7.19-260.el6.noarch

Error Summary
-------------

I am trying to install on RHEL 6.6, vmlinuz-2.6.32-504.el6.x86_64.

Thanks,
Rikk

Comment 16 Richard Plourde 2014-12-10 20:42:22 UTC
Has anybody found a solution for this. I cann go further in my Openstack implementation.

Comment 17 Richard Plourde 2014-12-10 20:46:07 UTC
I tried to remove selinux-policy-3.7.19-260.el6.noarch and selinux-policy-targeted-3.7.19-260.el6.noarch. It tries to install all three and conflicts.

Comment 18 Richard Plourde 2014-12-10 20:50:34 UTC
Trying to install Folsom.

Comment 19 Ryan Martin 2015-01-11 22:25:44 UTC
I had to manually install openstack-selinux-0.1.4-2.el6ost.noarch from the RDO/Icehouse repo (https://repos.fedorapeople.org/repos/openstack/openstack-icehouse/epel-6/openstack-selinux-0.1.4-2.el6ost.noarch.rpm) on my RHEL 6.5 OpenStack Havana servers, because this package was not added to the Havana repository. IMHO anyone else still running Havana would be helped by copying these packages from RDO/Icehouse to RDO/Havana.


Note You need to log in before you can comment on or make changes to this bug.