Bug 1370561 - selinux-policy-targeted-3.13.1-211.fc26 breaks rawhide composes
Summary: selinux-policy-targeted-3.13.1-211.fc26 breaks rawhide composes
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 26
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Lukas Vrabec
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: AcceptedBlocker
Depends On:
Blocks: F26AlphaBlocker
TreeView+ depends on / blocked
 
Reported: 2016-08-26 15:22 UTC by Kevin Fenzi
Modified: 2017-03-02 23:45 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-03-02 23:45:37 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Kevin Fenzi 2016-08-26 15:22:04 UTC
Todays rawhide compose failed to build install images at: 

DEBUG util.py:421:  2016-08-26 06:40:33,675: creating the runtime image
DEBUG util.py:421:  creating the runtime image
DEBUG util.py:421:  Traceback (most recent call last):
DEBUG util.py:421:    File "/usr/sbin/lorax", line 273, in <module>
DEBUG util.py:421:      main()
DEBUG util.py:421:    File "/usr/sbin/lorax", line 133, in main
DEBUG util.py:421:      remove_temp=True, verify=opts.verify)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/__init__.py", line 327, in run
DEBUG util.py:421:      size=size)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/treebuilder.py", line 221, in create_runtime
DEBUG util.py:421:      "Anaconda", size=size)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/imgutils.py", line 120, in mkrootfsimg
DEBUG util.py:421:      runcmd(cmd, root=root)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/executils.py", line 341, in runcmd
DEBUG util.py:421:      return execWithRedirect(cmd[0], cmd[1:], **kwargs)
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/executils.py", line 228, in execWithRedirect
DEBUG util.py:421:      env_add=env_add, reset_handlers=reset_handlers, reset_lang=reset_lang)[0]
DEBUG util.py:421:    File "/usr/lib/python3.5/site-packages/pylorax/executils.py", line 201, in _run_program
DEBUG util.py:421:      raise subprocess.CalledProcessError(proc.returncode, argv, output)
DEBUG util.py:421:  subprocess.CalledProcessError: Command '['setfiles', '-e', '/proc', '-e', '/sys', '-e', '/dev', '-e', '/install', '/etc/selinux/targeted/contexts/files/file_contexts', '/']' returned non-zero exit status 1
DEBUG util.py:546:  Child return code was: 1

and running that on my rawhide laptop gives: 

/etc/selinux/targeted/contexts/files/file_contexts: Multiple different specifications for /var/lib/kubelet(/.*)?  (system_u:object_r:svirt_sandbox_file_t:s0 and system_u:object_r:docker_var_lib_t:s0).
/etc/selinux/targeted/contexts/files/file_contexts: Invalid argument

Looks like a duplicate definition there between selinux-policy and docker-selinux.

Comment 1 Adam Williamson 2016-09-01 18:07:06 UTC
This is an automatic blocker for F26 Alpha: " Bugs which entirely prevent the composition of one or more of the release-blocking images required to be built for a currently-pending (pre-)release " - it breaks the entire compose process. https://fedoraproject.org/wiki/QA:SOP_blocker_bug_process#Automatic_blockers

Comment 2 Kevin Fenzi 2016-09-01 20:41:37 UTC
Note since this causes rawhide composes to fail, I untagged the initial broken one, and just now untagged the newer broken one. 

Tue Aug 23 05:33:40 2016: selinux-policy-3.13.1-210.fc26 tagged into f26 by lvrabec [still active]
Thu Aug 25 06:50:08 2016: selinux-policy-3.13.1-211.fc26 tagged into f26 by lvrabec
Fri Aug 26 11:32:57 2016: selinux-policy-3.13.1-211.fc26 untagged from f26 by kevin
Wed Aug 31 04:29:05 2016: selinux-policy-3.13.1-212.fc26 tagged into f26 by lvrabec
Thu Sep  1 14:40:57 2016: selinux-policy-3.13.1-212.fc26 untagged from f26 by kevin

Comment 3 Alexander Bokovoy 2016-09-03 22:11:48 UTC
The same happens when upgrading to Fedora 25:
  Upgrading   : selinux-policy-devel-3.13.1-211.fc25.noarch                                                                                                         619/2488 
  Upgrading   : docker-selinux-2:1.12.1-9.git2649fe1.fc25.x86_64                                                                                                    620/2488 
/etc/selinux/targeted/contexts/files/file_contexts: Multiple different specifications for /var/lib/kubelet(/.*)?  (system_u:object_r:svirt_sandbox_file_t:s0 and system_u:object_r:docker_var_lib_t:s0).
/etc/selinux/targeted/contexts/files/file_contexts: Invalid argument
libsemanage.semanage_install_final_tmp: setfiles returned error code 1. (No such file or directory).
/etc/selinux/targeted/contexts/files/file_contexts: Multiple different specifications for /var/lib/kubelet(/.*)?  (system_u:object_r:svirt_sandbox_file_t:s0 and system_u:object_r:docker_var_lib_t:s0).
/etc/selinux/targeted/contexts/files/file_contexts: Invalid argument
libsemanage.semanage_install_final_tmp: setfiles returned error code 1. (No such file or directory).
/usr/sbin/semodule:  Failed!

Comment 4 Adam Williamson 2016-09-13 23:53:09 UTC
Lukas says he thinks this scratch build should not have the problem:

http://koji.fedoraproject.org/koji/taskinfo?taskID=15543141

is it possible we can run a test compose with that to check, before he does an official build?

Comment 5 Lukas Vrabec 2016-09-15 16:01:45 UTC
I tested it today, together with the latest docker-selinux rpm package it's working.

Comment 6 Kevin Fenzi 2016-09-15 16:04:53 UTC
Thank you.

Comment 7 Fedora End Of Life 2017-02-28 10:09:45 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 26 development cycle.
Changing version to '26'.

Comment 8 Adam Williamson 2017-03-02 23:45:37 UTC
This was clearly resolved some time ago.


Note You need to log in before you can comment on or make changes to this bug.