Red Hat Bugzilla – Bug 623237
Date / Time Properties fails to set system time over network causing installs to fail if SELinux is turned off
Last modified: 2013-01-10 01:08:39 EST
Description of problem:
Attempting to ntp sync using firstboot to set the date & time gives an error dialog:
"Couldn't write either /etc/ntp.conf or /etc/sysconfig/network.
The install will not continue unless you think to UNcheck "Synchronize date and time over the network"
The same message appears if you try via System > Administration > Date & Time and check "Synchronize date and time over the network"
Version-Release number of selected component (if applicable):
# rpm -qa | grep -E "date|ntp"
How reproducible: Every time, tried on several installed F13s and a new/clean spin of F13 from fedora-kickstarts-0.13.5-1.fc13.noarch. Changes to the deault scripts were to turn both the firewall and selinux off
Steps to Reproduce:
1. Open System > Administration > Date & Time (or run from firstboot after install)
2. check "Synchronize date and time over the network"
3. Click "OK"
Error box: "Couldn't write either /etc/ntp.conf or /etc/sysconfig/network.
Time & date set
I've tried "NETWORKWAIT=yes" in /etc/sysconfig/network, no help
I've tried various combinations of starting & stopping ntp-releated services but the only useful one is to "chkconfig ntpd off" in a kickstart file, which causes "Synchronize date and time over the network" to be unchecked by default.
I can't reproduce that here. Please run system-config-date again, this time from the command line/terminal and post any error messages here, along with the output of these commands:
ls -l /etc/ntp.conf /etc/sysconfig/network
ls -lZ /etc/ntp.conf /etc/sysconfig/network
NB: You shouldn't (need to) turn off SELinux nowadays. Is there any particular reason why you felt you had to do that?
Sorry for the delayed response. I was training for my RHCT last week (passed!) so I did not gave an opportunity to run your tests until today.
[Errno 61] No data available
When I check "Synchronize date and time over the network" and hit OK.
# ls -l /etc/ntp.conf /etc/sysconfig/network
-rw-r--r-- 1 root root 1915 Jun 16 10:02 /etc/ntp.conf
-rw-r--r-- 1 root root 41 Jun 16 09:48 /etc/sysconfig/network
# ls -lZ /etc/ntp.conf /etc/sysconfig/network
-rw-r--r-- root root ? /etc/ntp.conf
-rw-r--r-- root root ? /etc/sysconfig/network
FWIW, I turn off SELinux in kickstart because I pull all of the SELinux tools out of the build to keep the size under my self-imposed limit. It seems like a cleaner solution to turn it off if it is not available.
Taking your hint, I let SELinux relable my disk and put it in "permissive" mode.
Once I did that, system-config-date & the ntp check box function correctly.
It appears system-config-date no longer works unless SELinux is enabled.
I put the default (?) SELinux stuff back in my build and it added about 27MB to the size.
That is a Bad Thing (tm). I have about 9MB of free space for the build.
If there is a minimal SELinux installation that can be used that is less than 10MB then I will be happy to add it, otherwise I think system-config-date should be fixed to work without SELinux again.
Hi Dave, it seems as if some things were broken if SELinux is switched off, see bug #627788, so please try out if things work with python-slip-0.2.13:
This needs libselinux/libselinux-python, but shouldn't need a complete SELinux stack.
I updated the 3 python-slip files from your Koji link:
I also have the following libselinux packages from the default repos:
After applying the updates, system-config-date & the ntp checkbox seems to be working as designed.
I would say you could add # 623237 to the Bugs Fixed list for your patch.
Hopefully you can get it pushed to testing & updates in the not too distant future.
Thanks for the help!
python-slip-0.2.13-1.fc13 has been submitted as an update for Fedora 13.
python-slip-0.2.13-1.fc12 has been submitted as an update for Fedora 12.
python-slip-0.2.13-1.fc14 has been submitted as an update for Fedora 14.
Quick update: I am creating some test kickstart builds with the new packages.
So far, it looks like the anaconda installer does not like to run if SELinux is in permissive mode. I am trying to create a new image with the python-slip updates and once dine I will try installing with SELinux in various modes.
Updating the packages after installing seems to work but I am having a bear of a time trying to get them to work in a live image. The hard disk installer crashes not far into the install process. (Bug 629320)
The crash on install is due to Bug 626780.
Making sure the kickstart does not update NetworkManager components past v. 0.8.1-1 seems to solve the issue.
python-slip-0.2.13-1.fc13 has been pushed to the Fedora 13 stable repository. If problems still persist, please make note of it in this bug report.
python-slip-0.2.13-1.fc14 has been pushed to the Fedora 14 stable repository. If problems still persist, please make note of it in this bug report.
python-slip-0.2.13-1.fc12 has been pushed to the Fedora 12 stable repository. If problems still persist, please make note of it in this bug report.