ovirt-node-iso SELinux build problems
Hey, for some time now we - the ovirt-node-iso builds - are seeing some selinux related build problems. They look similar to [1]: ERROR: policydb magic number 0x000008 does not match expected magic number 0xf97cff8c or 0xf97cff8d ERROR: Unable to open policy /sys/fs/selinux/policy. Traceback (most recent call last): File "/sbin/semanage", line 25, in <module> import seobject File "/usr/lib64/python2.7/site-packages/seobject.py", line 27, in <module> import sepolicy File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 65, in <module> raise e ValueError: Failed to read /sys/fs/selinux/policy policy file A first guess was that the policydb of the host didn't match the policydb beeing used in the livecd image. But it seems as if this is not the case, as the problems still occur. I'm no selinux expert but maybe bug #817485 (RHBz) contains a fix for this and I'd like to try this. The following two packages must be installed and be updated to the most recent version: yum -y update setools-console setools-libs-python Could someone install and/or check if they are updated to the latest versions on our two F18 builders? Thanks fabian -- [1] http://jenkins.ovirt.org/view/ovirt_node/job/ovirt-node-iso-devel/2015/conso... [2] https://bugzilla.redhat.com/show_bug.cgi?id=817485
installed: Loaded plugins: versionlock Cleaning repos: fedora ovirt-nightly updates 3 metadata files removed + sudo yum install setools-console setools-libs-python -y Loaded plugins: versionlock Package setools-libs-python-3.3.7-34.fc18.x86_64 already installed and latest version Resolving Dependencies --> Running transaction check ---> Package setools-console.x86_64 0:3.3.7-34.fc18 will be installed --> Finished Dependency Resolution Dependencies Resolved ================================================================================ Package Arch Version Repository Size ================================================================================ Installing: setools-console x86_64 3.3.7-34.fc18 updates 170 k Transaction Summary ================================================================================ Install 1 Package Total download size: 170 k Installed size: 557 k Downloading Packages: Running Transaction Check Running Transaction Test Transaction Test Succeeded Running Transaction Installing : setools-console-3.3.7-34.fc18.x86_64 1/1 Verifying : setools-console-3.3.7-34.fc18.x86_64 1/1 Installed: setools-console.x86_64 0:3.3.7-34.fc18 Complete! Finished: SUCCESS ----- Original Message -----
From: "Fabian Deutsch" <fabiand@redhat.com> To: infra@ovirt.org Sent: Monday, April 15, 2013 9:24:35 PM Subject: ovirt-node-iso SELinux build problems
Hey,
for some time now we - the ovirt-node-iso builds - are seeing some selinux related build problems. They look similar to [1]:
ERROR: policydb magic number 0x000008 does not match expected magic number 0xf97cff8c or 0xf97cff8d ERROR: Unable to open policy /sys/fs/selinux/policy. Traceback (most recent call last): File "/sbin/semanage", line 25, in <module> import seobject File "/usr/lib64/python2.7/site-packages/seobject.py", line 27, in <module> import sepolicy File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 65, in <module> raise e ValueError: Failed to read /sys/fs/selinux/policy policy file
A first guess was that the policydb of the host didn't match the policydb beeing used in the livecd image. But it seems as if this is not the case, as the problems still occur. I'm no selinux expert but maybe bug #817485 (RHBz) contains a fix for this and I'd like to try this. The following two packages must be installed and be updated to the most recent version:
yum -y update setools-console setools-libs-python
Could someone install and/or check if they are updated to the latest versions on our two F18 builders?
Thanks fabian
-- [1] http://jenkins.ovirt.org/view/ovirt_node/job/ovirt-node-iso-devel/2015/conso... [2] https://bugzilla.redhat.com/show_bug.cgi?id=817485
_______________________________________________ Infra mailing list Infra@ovirt.org http://lists.ovirt.org/mailman/listinfo/infra
Am Montag, den 15.04.2013, 14:29 -0400 schrieb Eyal Edri:
installed:
Thanks Eyal. Sadly this didn't solve the problem, now I hope that some SELinux expert can help us. https://bugzilla.redhat.com/show_bug.cgi?id=952352 Thanks fabian
Loaded plugins: versionlock Cleaning repos: fedora ovirt-nightly updates 3 metadata files removed + sudo yum install setools-console setools-libs-python -y Loaded plugins: versionlock Package setools-libs-python-3.3.7-34.fc18.x86_64 already installed and latest version Resolving Dependencies --> Running transaction check ---> Package setools-console.x86_64 0:3.3.7-34.fc18 will be installed --> Finished Dependency Resolution Dependencies Resolved
================================================================================ Package Arch Version Repository Size ================================================================================ Installing: setools-console x86_64 3.3.7-34.fc18 updates 170 k
Transaction Summary ================================================================================ Install 1 Package
Total download size: 170 k Installed size: 557 k Downloading Packages: Running Transaction Check Running Transaction Test Transaction Test Succeeded Running Transaction Installing : setools-console-3.3.7-34.fc18.x86_64 1/1 Verifying : setools-console-3.3.7-34.fc18.x86_64 1/1
Installed: setools-console.x86_64 0:3.3.7-34.fc18
Complete! Finished: SUCCESS
----- Original Message -----
From: "Fabian Deutsch" <fabiand@redhat.com> To: infra@ovirt.org Sent: Monday, April 15, 2013 9:24:35 PM Subject: ovirt-node-iso SELinux build problems
Hey,
for some time now we - the ovirt-node-iso builds - are seeing some selinux related build problems. They look similar to [1]:
ERROR: policydb magic number 0x000008 does not match expected magic number 0xf97cff8c or 0xf97cff8d ERROR: Unable to open policy /sys/fs/selinux/policy. Traceback (most recent call last): File "/sbin/semanage", line 25, in <module> import seobject File "/usr/lib64/python2.7/site-packages/seobject.py", line 27, in <module> import sepolicy File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 65, in <module> raise e ValueError: Failed to read /sys/fs/selinux/policy policy file
A first guess was that the policydb of the host didn't match the policydb beeing used in the livecd image. But it seems as if this is not the case, as the problems still occur. I'm no selinux expert but maybe bug #817485 (RHBz) contains a fix for this and I'd like to try this. The following two packages must be installed and be updated to the most recent version:
yum -y update setools-console setools-libs-python
Could someone install and/or check if they are updated to the latest versions on our two F18 builders?
Thanks fabian
-- [1] http://jenkins.ovirt.org/view/ovirt_node/job/ovirt-node-iso-devel/2015/conso... [2] https://bugzilla.redhat.com/show_bug.cgi?id=817485
_______________________________________________ Infra mailing list Infra@ovirt.org http://lists.ovirt.org/mailman/listinfo/infra
------=_Part_287625_242779738.1366075481380 Content-Type: text/plain; charset=GBK Content-Transfer-Encoding: 7bit hi,fabian deutsch: i have 2 tips. 1.run sestatus, check the mount point of "SELinuxfs mount", in most case it is /selinux, not "/sys/fs/selinux". 2.install audit-2.2-2.el6.x86_64 3.i do not know where to find ovirt.te. it seems passwd_file_t never been defined. thanks At 2013-04-16 02:24:35,"Fabian Deutsch" <fabiand@redhat.com> wrote:
Hey,
for some time now we - the ovirt-node-iso builds - are seeing some selinux related build problems. They look similar to [1]:
ERROR: policydb magic number 0x000008 does not match expected magic number 0xf97cff8c or 0xf97cff8d ERROR: Unable to open policy /sys/fs/selinux/policy. Traceback (most recent call last): File "/sbin/semanage", line 25, in <module> import seobject File "/usr/lib64/python2.7/site-packages/seobject.py", line 27, in <module> import sepolicy File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 65, in <module> raise e ValueError: Failed to read /sys/fs/selinux/policy policy file
A first guess was that the policydb of the host didn't match the policydb beeing used in the livecd image. But it seems as if this is not the case, as the problems still occur. I'm no selinux expert but maybe bug #817485 (RHBz) contains a fix for this and I'd like to try this. The following two packages must be installed and be updated to the most recent version:
yum -y update setools-console setools-libs-python
Could someone install and/or check if they are updated to the latest versions on our two F18 builders?
Thanks fabian
-- [1] http://jenkins.ovirt.org/view/ovirt_node/job/ovirt-node-iso-devel/2015/conso... [2] https://bugzilla.redhat.com/show_bug.cgi?id=817485
_______________________________________________ Infra mailing list Infra@ovirt.org http://lists.ovirt.org/mailman/listinfo/infra
------=_Part_287625_242779738.1366075481380 Content-Type: text/html; charset=GBK Content-Transfer-Encoding: 7bit <div style="line-height:1.7;color:#000000;font-size:14px;font-family:arial"><div>hi,fabian deutsch:</div><div>i have 2 tips.</div><div>1.run sestatus, check the mount point of "SELinuxfs mount", in most case it is /selinux, not "/sys/fs/selinux".</div><div>2.install audit-2.2-2.el6.x86_64</div><div>3.i do not know where to find <font size="2" face="Courier New">ovirt.te. it seems passwd_file_t never been defined.</font></div><p><font size="2" face="Courier New"></font> </p><p><font size="2" face="Courier New">thanks</font></p><div><br><br></div><div></div><div id="divNeteaseMailCard"></div><div></div><pre><br>At 2013-04-16 02:24:35,"Fabian Deutsch" <fabiand@redhat.com> wrote: >Hey, > >for some time now we - the ovirt-node-iso builds - are seeing some >selinux related build problems. They look similar to [1]: > >ERROR: policydb magic number 0x000008 does not match expected magic >number 0xf97cff8c or 0xf97cff8d >ERROR: Unable to open policy /sys/fs/selinux/policy. >Traceback (most recent call last): > File "/sbin/semanage", line 25, in <module> > import seobject > File "/usr/lib64/python2.7/site-packages/seobject.py", line 27, in <module> > import sepolicy > File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 65, in <module> > raise e >ValueError: Failed to read /sys/fs/selinux/policy policy file > >A first guess was that the policydb of the host didn't match the >policydb beeing used in the livecd image. But it seems as if this is not >the case, as the problems still occur. >I'm no selinux expert but maybe bug #817485 (RHBz) contains a fix for >this and I'd like to try this. >The following two packages must be installed and be updated to the most >recent version: > >yum -y update setools-console setools-libs-python > >Could someone install and/or check if they are updated to the latest >versions on our two F18 builders? > >Thanks >fabian > >-- >[1] >http://jenkins.ovirt.org/view/ovirt_node/job/ovirt-node-iso-devel/2015/conso... >[2] https://bugzilla.redhat.com/show_bug.cgi?id=817485 > >_______________________________________________ >Infra mailing list >Infra@ovirt.org >http://lists.ovirt.org/mailman/listinfo/infra </pre></div><br><br><span title="neteasefooter"><span id="netease_mail_footer"></span></span> ------=_Part_287625_242779738.1366075481380--
Hey! Am Dienstag, den 16.04.2013, 09:24 +0800 schrieb bigclouds:
hi,fabian deutsch: i have 2 tips.
First thanks for giving tips!
1.run sestatus, check the mount point of "SELinuxfs mount", in most case it is /selinux, not "/sys/fs/selinux".
I verified that the mountpoint of (sys/fs/selinux is selinux (fs).
2.install audit-2.2-2.el6.x86_64
Could you say what is so special baout this version? :) I can only pass this on to infra members as I don't have access to the builders.
3.i do not know where to find ovirt.te. it seems passwd_file_t never been defined.
I suppose this happens because of the earlier error: policydb magic number 0x000008 does not match expected magic (so the policydb couldn't be read and therefor the type is unknown) Bug https://bugzilla.redhat.com/show_bug.cgi?id=952352 is open to track this problem. Greetings fabian
thanks
At 2013-04-16 02:24:35,"Fabian Deutsch" <fabiand@redhat.com> wrote:
Hey,
for some time now we - the ovirt-node-iso builds - are seeing some selinux related build problems. They look similar to [1]:
ERROR: policydb magic number 0x000008 does not match expected magic number 0xf97cff8c or 0xf97cff8d ERROR: Unable to open policy /sys/fs/selinux/policy. Traceback (most recent call last): File "/sbin/semanage", line 25, in <module> import seobject File "/usr/lib64/python2.7/site-packages/seobject.py", line 27, in <module> import sepolicy File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 65, in <module> raise e ValueError: Failed to read /sys/fs/selinux/policy policy file
A first guess was that the policydb of the host didn't match the policydb beeing used in the livecd image. But it seems as if this is not the case, as the problems still occur. I'm no selinux expert but maybe bug #817485 (RHBz) contains a fix for this and I'd like to try this. The following two packages must be installed and be updated to the most recent version:
yum -y update setools-console setools-libs-python
Could someone install and/or check if they are updated to the latest versions on our two F18 builders?
Thanks fabian
-- [1] http://jenkins.ovirt.org/view/ovirt_node/job/ovirt-node-iso-devel/2015/conso... [2] https://bugzilla.redhat.com/show_bug.cgi?id=817485
_______________________________________________ Infra mailing list Infra@ovirt.org http://lists.ovirt.org/mailman/listinfo/infra
participants (3)
-
bigclouds -
Eyal Edri -
Fabian Deutsch