Bug 1198734
| Summary: | SELinux in enforcing mode prevents provisioning Docker containers | ||
|---|---|---|---|
| Product: | Red Hat Satellite | Reporter: | Elyézer Rezende <erezende> |
| Component: | SELinux | Assignee: | Lukas Zapletal <lzap> |
| Status: | CLOSED DUPLICATE | QA Contact: | Katello QA List <katello-qa-list> |
| Severity: | urgent | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.1.0 | ||
| Target Milestone: | Unspecified | ||
| Target Release: | Unused | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2015-03-05 16:01:34 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1190289 | ||
|
Description
Elyézer Rezende
2015-03-04 17:32:27 UTC
This also happens when trying to create a new docker container using a Katello repository. The logs for this follows: ==> /var/log/foreman/production.log <== 2015-03-04 12:30:57 [I] Processing by ContainersController#new as HTML 2015-03-04 12:30:57 [I] Redirected to https://qe-blade-16.example.com/wizard_states/13/steps/preliminary 2015-03-04 12:30:57 [I] Completed 302 Found in 26ms (ActiveRecord: 9.8ms) 2015-03-04 12:30:57 [I] Processing by Containers::StepsController#show as HTML 2015-03-04 12:30:57 [I] Parameters: {"wizard_state_id"=>"13", "id"=>"preliminary"} 2015-03-04 12:30:57 [I] Rendered taxonomies/_loc_org_tabs.html.erb (14.7ms) 2015-03-04 12:30:57 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_form_buttons.html.erb (1.2ms) 2015-03-04 12:30:57 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_title.html.erb (31.7ms) 2015-03-04 12:30:57 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/preliminary.html.erb within layouts/application (32.1ms) 2015-03-04 12:30:57 [I] Rendered home/_submenu.html.erb (3.2ms) 2015-03-04 12:30:57 [I] Rendered home/_user_dropdown.html.erb (1.6ms) 2015-03-04 12:30:57 [I] Read fragment views/tabs_and_title_records-3 (0.1ms) 2015-03-04 12:30:57 [I] Rendered home/_topbar.html.erb (6.1ms) 2015-03-04 12:30:57 [I] Rendered layouts/base.html.erb (7.5ms) 2015-03-04 12:30:57 [I] Completed 200 OK in 62ms (Views: 38.2ms | ActiveRecord: 6.6ms) 2015-03-04 12:31:05 [I] Processing by Containers::StepsController#update as HTML 2015-03-04 12:31:05 [I] Parameters: {"utf8"=>"✓", "authenticity_token"=>"t9HWY6bUIIrR78+UYljTZhMkkSf97a96jvdlD/uq2EM=", "docker_container_wizard_states_preliminary"=>{"compute_resource_id"=>"4", "location_ids"=>[""], "organization_ids"=>["", "1"]}, "wizard_state_id"=>"13", "id"=>"preliminary"} 2015-03-04 12:31:05 [I] Redirected to https://qe-blade-16.example.com/wizard_states/13/steps/image 2015-03-04 12:31:05 [I] Completed 302 Found in 44ms (ActiveRecord: 16.2ms) 2015-03-04 12:31:05 [I] Processing by Containers::StepsController#show as HTML 2015-03-04 12:31:05 [I] Parameters: {"wizard_state_id"=>"13", "id"=>"image"} 2015-03-04 12:31:05 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/katello-2.2.0.19/app/views/foreman_docker/containers/steps/_katello_container.html.erb (22.3ms) 2015-03-04 12:31:05 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_form_buttons.html.erb (0.9ms) 2015-03-04 12:31:05 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_form_buttons.html.erb (1.0ms) 2015-03-04 12:31:05 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_image_hub_tab.html.erb (162.7ms) 2015-03-04 12:31:05 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_form_buttons.html.erb (0.9ms) 2015-03-04 12:31:05 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_image_hub_tab.html.erb (8.4ms) 2015-03-04 12:31:05 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_title.html.erb (198.4ms) 2015-03-04 12:31:05 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/image.html.erb within layouts/application (200.1ms) 2015-03-04 12:31:05 [I] Rendered home/_submenu.html.erb (3.2ms) 2015-03-04 12:31:05 [I] Rendered home/_user_dropdown.html.erb (1.6ms) 2015-03-04 12:31:05 [I] Read fragment views/tabs_and_title_records-3 (0.1ms) 2015-03-04 12:31:05 [I] Rendered home/_topbar.html.erb (6.5ms) 2015-03-04 12:31:05 [I] Rendered layouts/base.html.erb (7.9ms) 2015-03-04 12:31:05 [I] Completed 200 OK in 224ms (Views: 206.1ms | ActiveRecord: 6.1ms) 2015-03-04 12:31:39 [I] Processing by Katello::Api::V2::ContentViewsController#index as JSON 2015-03-04 12:31:39 [I] Parameters: {"environment_id"=>"1", "api_version"=>"v2", "organization_id"=>"1"} 2015-03-04 12:31:39 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/katello-2.2.0.19/app/views/katello/api/v2/content_views/index.json.rabl within katello/api/v2/layouts/collection (15.3ms) 2015-03-04 12:31:39 [I] Completed 200 OK in 57ms (Views: 15.8ms | ActiveRecord: 6.2ms) 2015-03-04 12:31:41 [I] Processing by Katello::Api::V2::RepositoriesController#index as JSON 2015-03-04 12:31:41 [I] Parameters: {"organization_id"=>"1", "content_view_id"=>"1", "environment_id"=>"1", "content_type"=>"docker", "api_version"=>"v2"} 2015-03-04 12:31:41 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/katello-2.2.0.19/app/views/katello/api/v2/repositories/index.json.rabl within katello/api/v2/layouts/collection (206.3ms) 2015-03-04 12:31:41 [I] Completed 200 OK in 236ms (Views: 200.8ms | ActiveRecord: 9.6ms) 2015-03-04 12:31:43 [I] Processing by Katello::Api::V2::DockerTagsController#index as JSON 2015-03-04 12:31:43 [I] Parameters: {"api_version"=>"v2", "repository_id"=>"2"} 2015-03-04 12:31:44 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/katello-2.2.0.19/app/views/katello/api/v2/docker_tags/index.json.rabl within katello/api/v2/layouts/collection (79.0ms) 2015-03-04 12:31:44 [I] Completed 200 OK in 250ms (Views: 76.7ms | ActiveRecord: 5.1ms) 2015-03-04 12:31:48 [I] Processing by Containers::StepsController#update as HTML 2015-03-04 12:31:48 [I] Parameters: {"utf8"=>"✓", "authenticity_token"=>"t9HWY6bUIIrR78+UYljTZhMkkSf97a96jvdlD/uq2EM=", "katello"=>"true", "organization_id"=>"1", "kt_environment"=>{"id"=>"1"}, "content_view"=>{"id"=>"1"}, "repository"=>{"id"=>"2"}, "tag"=>{"id"=>"12"}, "capsule"=>{"id"=>"1"}, "wizard_state_id"=>"13", "id"=>"image"} 2015-03-04 12:31:48 [I] Redirected to https://qe-blade-16.example.com/wizard_states/13/steps/configuration 2015-03-04 12:31:48 [I] Completed 302 Found in 31ms (ActiveRecord: 9.3ms) 2015-03-04 12:31:48 [I] Processing by Containers::StepsController#show as HTML 2015-03-04 12:31:48 [I] Parameters: {"wizard_state_id"=>"13", "id"=>"configuration"} 2015-03-04 12:31:48 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_form_buttons.html.erb (0.8ms) 2015-03-04 12:31:48 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_title.html.erb (11.1ms) 2015-03-04 12:31:48 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/configuration.html.erb within layouts/application (11.5ms) 2015-03-04 12:31:48 [I] Rendered home/_submenu.html.erb (3.1ms) 2015-03-04 12:31:48 [I] Rendered home/_user_dropdown.html.erb (1.5ms) 2015-03-04 12:31:48 [I] Read fragment views/tabs_and_title_records-3 (0.1ms) 2015-03-04 12:31:48 [I] Rendered home/_topbar.html.erb (6.6ms) 2015-03-04 12:31:48 [I] Rendered layouts/base.html.erb (8.0ms) 2015-03-04 12:31:48 [I] Completed 200 OK in 35ms (Views: 20.8ms | ActiveRecord: 2.6ms) 2015-03-04 12:31:56 [I] Processing by Containers::StepsController#update as HTML 2015-03-04 12:31:56 [I] Parameters: {"utf8"=>"✓", "authenticity_token"=>"t9HWY6bUIIrR78+UYljTZhMkkSf97a96jvdlD/uq2EM=", "docker_container_wizard_states_configuration"=>{"name"=>"omaciel-centos-7-docker-1", "command"=>"/usr/bin/yum repolist", "entrypoint"=>"", "cpu_set"=>"", "cpu_shares"=>"", "memory"=>""}, "wizard_state_id"=>"13", "id"=>"configuration"} 2015-03-04 12:31:56 [I] Redirected to https://qe-blade-16.example.com/wizard_states/13/steps/environment 2015-03-04 12:31:56 [I] Completed 302 Found in 25ms (ActiveRecord: 8.3ms) 2015-03-04 12:31:56 [I] Processing by Containers::StepsController#show as HTML 2015-03-04 12:31:56 [I] Parameters: {"wizard_state_id"=>"13", "id"=>"environment"} 2015-03-04 12:31:56 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/foreman_docker/common_parameters/_environment_variable.html.erb (160.6ms) 2015-03-04 12:31:56 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_form_buttons.html.erb (1.2ms) 2015-03-04 12:31:56 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_title.html.erb (172.1ms) 2015-03-04 12:31:56 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/environment.html.erb within layouts/application (172.5ms) 2015-03-04 12:31:56 [I] Rendered home/_submenu.html.erb (3.1ms) 2015-03-04 12:31:56 [I] Rendered home/_user_dropdown.html.erb (1.7ms) 2015-03-04 12:31:56 [I] Read fragment views/tabs_and_title_records-3 (0.1ms) 2015-03-04 12:31:56 [I] Rendered home/_topbar.html.erb (6.6ms) 2015-03-04 12:31:56 [I] Rendered layouts/base.html.erb (8.0ms) 2015-03-04 12:31:56 [I] Completed 200 OK in 196ms (Views: 182.0ms | ActiveRecord: 2.4ms) 2015-03-04 12:32:00 [I] Processing by Containers::StepsController#update as HTML 2015-03-04 12:32:00 [I] Parameters: {"utf8"=>"✓", "authenticity_token"=>"t9HWY6bUIIrR78+UYljTZhMkkSf97a96jvdlD/uq2EM=", "docker_container_wizard_states_environment"=>{"tty"=>"1", "attach_stdin"=>"1", "attach_stdout"=>"1", "attach_stderr"=>"1"}, "wizard_state_id"=>"13", "id"=>"environment"} 2015-03-04 12:32:01 [I] Failed to save: 2015-03-04 12:32:01 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/foreman_docker/common_parameters/_environment_variable.html.erb (1.1ms) 2015-03-04 12:32:01 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_form_buttons.html.erb (0.9ms) 2015-03-04 12:32:01 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/_title.html.erb (12.1ms) 2015-03-04 12:32:01 [I] Rendered /opt/rh/ruby193/root/usr/share/gems/gems/foreman_docker-1.2.0.2/app/views/containers/steps/environment.html.erb within layouts/application (12.5ms) 2015-03-04 12:32:01 [I] Rendered home/_submenu.html.erb (3.0ms) 2015-03-04 12:32:01 [I] Rendered home/_user_dropdown.html.erb (1.7ms) 2015-03-04 12:32:01 [I] Read fragment views/tabs_and_title_records-3 (0.1ms) 2015-03-04 12:32:01 [I] Rendered home/_topbar.html.erb (6.4ms) 2015-03-04 12:32:01 [I] Rendered layouts/base.html.erb (7.9ms) 2015-03-04 12:32:01 [I] Completed 200 OK in 109ms (Views: 22.1ms | ActiveRecord: 21.7ms) Please paste output of the following commands in this order: rpm -q foreman-selinux selinux-policy getenforce ps auxZ | grep RackApp semodule -l | grep foreman foreman-selinux-enable foreman-selinux-disable foreman-selinux-enable foreman-selinux-relabel -v semanage boolean -l semanage fcontext -l sepolgen-ifgen &>/dev/null && audit2allow -Ra || audit2allow -a ausearch -m AVC -m USER_AVC -m SELINUX_ERR | head -n 50 Clone of the other, does not matter if its external or not for SELinux. *** This bug has been marked as a duplicate of bug 1198727 *** |