Bug #9805: Puppet master generates lots of invalid context messages - SELinux - Foreman

Actions

Copy link

Bug #9805

closed

Puppet master generates lots of invalid context messages

Added by Lukas Zapletal almost 10 years ago. Updated over 6 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Lukas Zapletal

Category:

General Foreman

Target version:

1.15.4

Difficulty:

Triaged:

Bugzilla link:

1202924

Pull request:

https://github.com/theforeman/foreman-selinux/pull/67

Fixed in Releases:

Found in Releases:

Red Hat JIRA:

Description

During installation on RHEL7 I see this failure once, then catalog is compiled successfully:

Mar 13 10:11:07 fseven puppet-master[20182]: Failed to find fseven.zzz.lan via exec: Execution of '/etc/puppet/node.rb fseven.zzz.lan' returned 1:

Looks like this is harmless, but we should investigate why this happens and if we can prevent this.

Actions

Copy link

Updated by Lukas Zapletal almost 10 years ago

Bugzilla link set to 1202924

Actions

Copy link

Updated by Dominic Cleal almost 10 years ago

Please provide logs?

Actions

Copy link

Updated by Dominic Cleal almost 10 years ago

Category deleted (~~foreman-installer script~~)
Status changed from New to Need more information

Actions

Copy link

Updated by Bryan Kearney about 8 years ago

Status changed from Need more information to New

From downstream:

vrempet@li-lc-1017 ~
$ grep -c /etc/selinux/targeted/contexts/files/file_contexts /var/log/messages
512

vrempet@li-lc-1017 ~
$ grep /etc/selinux/targeted/contexts/files/file_contexts /var/log/messages | tail -n 5
Oct 5 12:45:11 li-lc-1017 puppet-master⁹⁰²⁶: /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:puppet_etc_t:s0
Oct 5 12:45:38 li-lc-1017 puppet-master⁹⁰⁴⁶: /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:puppet_etc_t:s0
Oct 5 12:45:38 li-lc-1017 puppet-master⁹⁰⁴⁶: /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:puppet_etc_t:s0
Oct 5 12:45:38 li-lc-1017 puppet-master⁹⁰⁴⁶: /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:puppet_etc_t:s0
Oct 5 12:45:38 li-lc-1017 puppet-master⁹⁰⁴⁶: /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:puppet_etc_t:s0

vrempet@li-lc-1017 ~
$ uptime
12:55:58 up 13 min, 1 user, load average: 0.01, 0.51, 0.65

Actions

Copy link

Updated by Dominic Cleal about 8 years ago

Status changed from New to Need more information

Does the execution of node.rb outside of the puppet-master process work or fail? If it fails, please provide the Foreman logs.

Are there any AVC denials? I'm unsure that those log messages are relevant or show anything relating to the issue description.

The logs don't appear to come from the same host, are these definitely demonstrating the same underlying bug?

Actions

Copy link

Updated by Lukas Zapletal almost 8 years ago

Project changed from Installer to SELinux
Subject changed from Initial ENC run fails to Puppet master generates lots of invalid context messages
Category set to General Foreman
Status changed from Need more information to Assigned
Assignee set to Lukas Zapletal