Hide Forgot
Description of problem: When updating RHEL 7 with container-selinux-1.10.3-59.el7 (but not docker-selinux nor docker-engine-selinux) installed, I see: ... Updating : selinux-policy-targeted-3.13.1-102.el7_3.13.noarch Re-declaration of type docker_t Failed to create node Bad type declaration at /etc/selinux/targeted/tmp/modules/100/docker/cil:1 /usr/sbin/semodule: Failed! ... Update was: ---> Package selinux-policy-targeted.noarch 0:3.13.1-102.el7_3.7 will be updated ---> Package selinux-policy-targeted.noarch 0:3.13.1-102.el7_3.13 will be an update Thanks.
This happened, I belive, because you had a former bad container-selinux package installed. The latest container-selinux disables docker module, whereas a test version removed it. Disabling it should not cause this issue, since selinux-policy-targeted will just update the disabled module. Where as the older version of contianer-selinux which removed the docker module, the updated selinux-policy would re-add it causing this issue. dnf remove container-selinux dnf reinstall selinux-policy dnf install container-selinux Should fix the issue.
(In reply to Daniel Walsh from comment #1) > This happened, I belive, because you had a former bad container-selinux > package installed. > > The latest container-selinux disables docker module, whereas a test version > removed it. Disabling it should not cause this issue, since > selinux-policy-targeted will just update the disabled module. Where as the > older version of contianer-selinux which removed the docker module, the > updated selinux-policy would re-add it causing this issue. > > dnf remove container-selinux > dnf reinstall selinux-policy > dnf install container-selinux > > Should fix the issue. Thanks, this it, these steps worked.
I'm going to investigate if the same problem appears after application of the latest batch update.
So this is happening if container-selinux is not installed?
Yes, docker* or container* RPM packages were never installed on the machines, which I used for testing.
Ok so I guess lukas has removed the docker.pp and replaced it with container.pp in the default install. On update it seems like it is not removing docker.pp at the same time as it is adding container.pp?
*** Bug 1427296 has been marked as a duplicate of this bug. ***
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:1861