Bug 715018 - image factory rsync errors on some selinux commands
Summary: image factory rsync errors on some selinux commands
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: CloudForms Cloud Engine
Classification: Retired
Component: imagefactory
Version: 1.0.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: rc
Assignee: Ian McLeod
QA Contact: Dave Johnson
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-06-21 16:01 UTC by Dave Johnson
Modified: 2012-05-15 20:06 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-05-15 20:06:11 UTC


Attachments (Terms of Use)
full log (28.18 KB, text/plain)
2011-06-21 16:01 UTC, Dave Johnson
no flags Details
Full log from imagefactory (29.96 KB, text/x-log)
2011-11-03 18:21 UTC, Brad P. Crochet
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHEA-2012:0588 0 normal SHIPPED_LIVE new packages: imagefactory 2012-05-15 22:31:27 UTC

Description Dave Johnson 2011-06-21 16:01:45 UTC
Created attachment 505854 [details]
full log

Description of problem:
Running a push through image factory via the aeolus-image command, I see these rsync error in the imagefactory.log.   


Warning: rsync reports files partially copied:
('', 'rsync: rsync_xal_clear: lremovexattr("etc/ld.so.conf.d/.libc6-xen.conf.s2mv2G","security.selinux") failed: Permission denied (13)\nrsync: rsync_xal_clear: lremovexattr("etc/sysconfig/.cloud-info.vbufUc","security.selinux") failed: Permission denied (13)\nrsync: rsync_xal_clear: lremovexattr("var/cache/ldconfig/.aux-cache.ZgfV3P","security.selinux") failed: Permission denied (13)\nrsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1042) [sender=3.0.7]\n')



Version-Release number of selected component (if applicable):
[root@hp-xw6600-02 log]# rpm -qa | egrep 'aeolus|factory|iwhd|oz' | sort
aeolus-all-0.3.0-0.el6.20110620142346git1c969a7.noarch
aeolus-conductor-0.3.0-0.el6.20110620142346git1c969a7.noarch
aeolus-conductor-daemons-0.3.0-0.el6.20110620142346git1c969a7.noarch
aeolus-conductor-doc-0.3.0-0.el6.20110620142346git1c969a7.noarch
aeolus-configure-2.0.1-0.el6.20110602110128git5cb9257.noarch
imagefactory-0.2.0_15_g14c6294-1.el6.noarch
iwhd-0.96.1.9e86-1.el6.x86_64
oz-0.4.0-1.el6.x86_64
rubygem-aeolus-cli-0.0.1-1.el6.20110620142346git1c969a7.noarch
rubygem-image_factory_connector-0.0.3-1.el6.20110620142346git1c969a7.noarch
rubygem-image_factory_console-0.4.0-1.el6.20110620142346git1c969a7.noarch
[root@hp-xw6600-02 log]# 


Steps to Reproduce:
1.  Install aeolus-all from RHEL aeolus-testing repo
2.  run aeolus-configure
3.  login and add a valid provider account
4.  from cmd line, add a /root/.aeolus-cli
5.  run 'aeolus-image build --target ec2 --template /usr/lib/ruby/gems/1.8/gems/aeolus-cli-0.0.1/spec/sample_data/custom_repo.tdl'
6.  run 'aeolus-image push --provider ec2-us-east-1 --id <image_id_from_step_5>
  
Actual results:
errors

Expected results:
no errors

Additional info:
the push did complete successfully. Assuming there will be issues with the image around selinux security.

Comment 1 wes hayutin 2011-09-28 16:38:50 UTC
making sure all the bugs are at the right version for future queries

Comment 3 jrd 2011-10-03 17:26:32 UTC
https://www.aeolusproject.org/redmine/issues/2391

I think this should be set to ON_QA.  Ian?

Comment 4 Brad P. Crochet 2011-11-03 18:21:40 UTC
Created attachment 531625 [details]
Full log from imagefactory

Comment 5 Brad P. Crochet 2011-11-03 18:23:01 UTC
Still present:

Warning: rsync reports files partially copied:
('', 'rsync: rsync_xal_clear: lremovexattr("etc/ld.so.conf.d/.libc6-xen.conf.djC9hz","security.selinux") failed: Permission denied (13)\nrsync: rsync_xal_clear: lremovexattr("etc/sysconfig/.cloud-info.B0xm65","security.selinux") failed: Permission denied (13)\nrsync: rsync_xal_clear: lremovexattr("var/cache/ldconfig/.aux-cache.soOcTl","security.selinux") failed: Permission denied (13)\nrsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1042) [sender=3.0.7]\n')

[root@qeblade33 log]# getenforce 
Enforcing

[root@qeblade33 ~]# rpm -qa | egrep 'aeolus|factory|iwhd|oz' | sort
aeolus-all-0.6.0-0.20111029030732git7410602.el6.noarch
aeolus-conductor-0.6.0-0.20111029030732git7410602.el6.noarch
aeolus-conductor-daemons-0.6.0-0.20111029030732git7410602.el6.noarch
aeolus-conductor-doc-0.6.0-0.20111029030732git7410602.el6.noarch
aeolus-configure-2.3.0-0.20111028220920gitf01b051.el6.noarch
imagefactory-0.8.0-1.el6.noarch
imagefactory-jeosconf-ec2-fedora-0.8.0-1.el6.noarch
imagefactory-jeosconf-ec2-rhel-0.8.0-1.el6.noarch
iwhd-0.991-1.el6.x86_64
oz-0.7.0-3.el6.noarch
rubygem-aeolus-cli-0.1.0-3.20111028152758git7063136.el6.noarch
rubygem-aeolus-image-0.1.0-4.20111024205454git6b2b696.el6.noarch
rubygem-arel-2.0.10-0.aeolus.el6.noarch
rubygem-imagefactory-console-0.5.0-4.20110824113238gitd9debef.el6.noarch
rubygem-rack-mount-0.7.1-3.aeolus.el6.noarch
rubygem-ZenTest-4.3.3-2.aeolus.el6.noarch

<Install from git>

[root@qeblade33 ~]# rpm -qa | grep imagefactory
imagefactory-jeosconf-ec2-fedora-0.8.0_3_g62e88fa-1.el6.noarch
imagefactory-0.8.0_3_g62e88fa-1.el6.noarch
imagefactory-jeosconf-ec2-rhel-0.8.0_3_g62e88fa-1.el6.noarch
rubygem-imagefactory-console-0.5.0-4.20110824113238gitd9debef.el6.noarch

[root@qeblade33 ~]# aeolus-image build --target ec2 --template /usr/lib/ruby/gems/1.8/gems/aeolus-cli-0.1.0/examples/custom_repo.tdl
Image: c2ff79ef-9dbb-4442-b86a-c9c2084ab466
Build: cd68a6aa-3337-4380-8e12-99e4c2d66cdd
Target Image: d53ce818-770c-4bb4-9f32-180bb68ae073	 :Status New

[root@qeblade33 ~]# aeolus-image push --provider ec2-us-east-1 --account bpc_ec2 --image c2ff79ef-9dbb-4442-b86a-c9c2084ab466 --build cd68a6aa-3337-4380-8e12-99e4c2d66cdd --targetimage d53ce818-770c-4bb4-9f32-180bb68ae073

Image: c2ff79ef-9dbb-4442-b86a-c9c2084ab466
Build: cd68a6aa-3337-4380-8e12-99e4c2d66cdd
Target Image: d53ce818-770c-4bb4-9f32-180bb68ae073
Provider Image: 463ef6b4-c16d-444f-b8d5-bb3097a922fa
Status: New

Comment 6 Ian McLeod 2011-11-03 18:49:20 UTC
So, we believe these errors are benign and are a result of the peculiar process used for EC2 snapshot builds where we attempt to rsync the entire running filesystem into a temporary loopback mount.

The images that result from these builds are fully functional.

Comment 7 Brad P. Crochet 2011-11-03 18:57:19 UTC
(In reply to comment #6)
> So, we believe these errors are benign and are a result of the peculiar process
> used for EC2 snapshot builds where we attempt to rsync the entire running
> filesystem into a temporary loopback mount.
> 
> The images that result from these builds are fully functional.

Agreed that they are benign. Marking as verified.

Comment 9 errata-xmlrpc 2012-05-15 20:06:11 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHEA-2012-0588.html


Note You need to log in before you can comment on or make changes to this bug.