2057475 – [RFE] /var/tmp on RHV should be on its own partition

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 2057475 - [RFE] /var/tmp on RHV should be on its own partition

Summary: [RFE] /var/tmp on RHV should be on its own partition

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Deadline:	2022-03-22
Product:	Red Hat Enterprise Linux 8
Classification:	Red Hat
Component:	anaconda
Sub Component:
Version:	8.6
Hardware:	Unspecified
OS:	Unspecified
Priority:	urgent
Severity:	medium
Target Milestone:	rc
Target Release:	---
Assignee:	Vendula Poncova
QA Contact:	Release Test Team
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:	2055829 2060376
TreeView+	depends on / blocked

Reported:	2022-02-23 13:00 UTC by Sandro Bonazzola
Modified:	2022-05-10 13:59 UTC (History)
CC List:	5 users (show)
Fixed In Version:	anaconda-33.16.6.7-1.el8
Doc Type:	If docs needed, set a value
Doc Text:
Clone Of:
Clones:	2058538 2060376 2060822 (view as bug list)
Environment:
Last Closed:	2022-05-10 13:37:05 UTC
Type:	Bug
Target Upstream Version:
Embargoed:
Dependent Products:
Flags:	pm-rhel: mirror+

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Github	rhinstaller anaconda pull 3888	None	open	ovirt: move /var/tmp to its own partition	2022-02-23 13:04:10 UTC
Github	rhinstaller anaconda pull 3890	None	open	[rhel-9] ovirt: move /var/tmp to its own partition	2022-02-23 13:17:41 UTC
Github	rhinstaller anaconda pull 3891	None	open	master: move /var/tmp to its own partition	2022-02-23 13:23:25 UTC
Red Hat Issue Tracker	RHELPLAN-113279	None	None	None	2022-02-23 13:08:35 UTC
Red Hat Issue Tracker	RTT-4290	None	None	None	2022-03-03 12:43:36 UTC
Red Hat Issue Tracker	RTT-4291	None	None	None	2022-03-03 12:43:40 UTC
Red Hat Product Errata	RHBA-2022:1780	None	None	None	2022-05-10 13:37:14 UTC

Description Sandro Bonazzola 2022-02-23 13:00:16 UTC

Following up on bug #2055829 for DISA-STIG support on RHV-H.
We need to adjust anaconda configuration for moving /var/tmp to its own partition.

Comment 2 Sandro Bonazzola 2022-02-23 13:04:10 UTC

Posted a fix https://github.com/rhinstaller/anaconda/pull/3888 not sure which other branch will require to be aligned.

Comment 3 Sandro Bonazzola 2022-02-23 13:05:01 UTC

The fix is needed in RHEL 8.6

Comment 4 Sandro Bonazzola 2022-02-23 13:17:42 UTC

Added rhel 9 porting at https://github.com/rhinstaller/anaconda/pull/3890

Comment 5 Sandro Bonazzola 2022-02-23 13:23:26 UTC

And master: https://github.com/rhinstaller/anaconda/pull/3891

Comment 6 Jiri Konecny 2022-02-24 10:11:30 UTC

Hi Sandro, thanks for all the work.

It's too late for the current 8.6 so I would rather like to get this to 8.7. Will that be ok for you? If not we have to ask for the exception to do the build.

Also, we need this bug cloned on 9.0 if you want to have it there too.

Comment 7 Sandro Bonazzola 2022-02-24 12:47:05 UTC

(In reply to Jiri Konecny from comment #6)
> Hi Sandro, thanks for all the work.
> 
> It's too late for the current 8.6 so I would rather like to get this to 8.7.
> Will that be ok for you? If not we have to ask for the exception to do the
> build.
> 
> Also, we need this bug cloned on 9.0 if you want to have it there too.

RHV is going to stay on 8.6 EUS so if this is not getting in for 8.6, we'll have to override anaconda config within RHV-H ISO.
About RHEL 9, yes, it will help getting it in. Do you want me to clone?

Comment 8 Jiri Konecny 2022-02-25 09:50:07 UTC

Cloned bug 2058538.

Comment 9 Jiri Konecny 2022-02-25 10:00:24 UTC

I asked QE if they are willing to add this to 8.6 and they are fine with that (they will do sanity only test). And for us, you already provided PRs and working on finishing them on the repository.

I think we are fine to merge this to 8.6 and 9.0 but we need exception+. It's too late to get this in without the exception. If you want to get this fix in, please set exception ? and add justification for this bug and the 9.0 bug.

Comment 10 Sandro Bonazzola 2022-02-28 08:53:56 UTC

Requesting exception as this is needed for DISA-STIG certification of RHV-H.

Comment 13 Jiri Konecny 2022-03-01 09:56:44 UTC

Request reason is already written in comment 7.

Comment 14 Jiri Konecny 2022-03-01 10:01:09 UTC

Returning back request for Impact Statement clarification.

Comment 17 Vendula Poncova 2022-03-08 14:44:31 UTC

Ported to 8.6 at https://github.com/rhinstaller/anaconda/pull/3931.

Comment 19 Jan Stodola 2022-03-10 14:17:38 UTC

Tested with anaconda-33.16.6.7-1.el8, /var/tmp (and /var/crash) exist when installing with inst.product="Red Hat Virtualization" on the kernel cmdline:

[root@localhost ~]# lsblk 
NAME                       MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT
sr0                         11:0    1 1024M  0 rom  
vda                        252:0    0   60G  0 disk 
├─vda1                     252:1    0    1G  0 part /boot
└─vda2                     252:2    0   59G  0 part 
  ├─rhel-pool00_tmeta      253:0    0   48M  0 lvm  
  │ └─rhel-pool00-tpool    253:2    0 44.5G  0 lvm  
  │   ├─rhel-root          253:3    0  7.5G  0 lvm  /
  │   ├─rhel-pool00        253:5    0 44.5G  1 lvm  
  │   ├─rhel-var_tmp       253:6    0   10G  0 lvm  /var/tmp
  │   ├─rhel-var_log_audit 253:7    0    2G  0 lvm  /var/log/audit
  │   ├─rhel-var_log       253:8    0    8G  0 lvm  /var/log
  │   ├─rhel-var_crash     253:9    0   10G  0 lvm  /var/crash
  │   ├─rhel-var           253:10   0    5G  0 lvm  /var
  │   ├─rhel-tmp           253:11   0    1G  0 lvm  /tmp
  │   └─rhel-home          253:12   0    1G  0 lvm  /home
  ├─rhel-pool00_tdata      253:1    0 44.5G  0 lvm  
  │ └─rhel-pool00-tpool    253:2    0 44.5G  0 lvm  
  │   ├─rhel-root          253:3    0  7.5G  0 lvm  /
  │   ├─rhel-pool00        253:5    0 44.5G  1 lvm  
  │   ├─rhel-var_tmp       253:6    0   10G  0 lvm  /var/tmp
  │   ├─rhel-var_log_audit 253:7    0    2G  0 lvm  /var/log/audit
  │   ├─rhel-var_log       253:8    0    8G  0 lvm  /var/log
  │   ├─rhel-var_crash     253:9    0   10G  0 lvm  /var/crash
  │   ├─rhel-var           253:10   0    5G  0 lvm  /var
  │   ├─rhel-tmp           253:11   0    1G  0 lvm  /tmp
  │   └─rhel-home          253:12   0    1G  0 lvm  /home
  └─rhel-swap              253:4    0  2.5G  0 lvm  [SWAP]
[root@localhost ~]#

Marking as Verified:Tested

Comment 23 Jan Stodola 2022-03-14 11:44:43 UTC

Checked that anaconda-33.16.6.7-1.el8 is in nightly compose RHEL-8.6.0-20220312.3

Moving to VERIFIED

Comment 25 errata-xmlrpc 2022-05-10 13:37:05 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (anaconda bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:1780

Note You need to log in before you can comment on or make changes to this bug.