Project

General

Profile

Actions

Bug #14890

closed

foreman-installer failing on fresh CentOS 7 install

Added by Jonathon Anderson almost 8 years ago. Updated almost 8 years ago.

Status:
Duplicate
Priority:
High
Assignee:
-
Category:
-
Target version:
-
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

I've got a fully-updated, fresh install of CentOS 7, and am following the quickstart instructions for foreman-installer. I have literally no custom configuration.

foreman-install fails with


[root@fox1 ~]# foreman-installer
/Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[fox1.civilfritz.net]: Could not evaluate: Proxy fox1.civilfritz.net cannot be registered (500 Internal Server Error): N/A
Installing Done [100%] [................................................................................................................]
Something went wrong! Check the log for ERROR-level output * Foreman is running at https://fox1.civilfritz.net
Initial credentials are admin / YX2QNo8CTFVR4owF * Foreman Proxy is running at https://fox1.civilfritz.net:8443 * Puppetmaster is running at port 8140
The full log is at /var/log/foreman-installer/foreman.log


But foreman-install succeeds with setenforce 0.

[root@fox1 ~]# grep denied /var/log/audit/audit.log | audit2allow

#============= httpd_t ==============
allow httpd_t foreman_log_t:file { write open };
allow httpd_t foreman_var_run_t:dir { write rmdir read remove_name create add_name };
allow httpd_t foreman_var_run_t:file { rename setattr read create write ioctl unlink open append };
allow httpd_t puppet_etc_t:dir read;
allow httpd_t self:capability sys_ptrace;

#!!!! This avc can be allowed using the boolean 'httpd_run_stickshift'
allow httpd_t self:capability { fowner fsetid };
allow httpd_t self:capability2 block_suspend;

[root@fox1 ~]# rpm -qa | grep -i foreman
foreman-installer-1.11.1-1.el7.noarch
foreman-release-scl-2-1.el7.x86_64
foreman-debug-1.11.1-1.el7.noarch
foreman-proxy-1.11.1-1.el7.noarch
foreman-release-1.11.1-1.el7.noarch
foreman-postgresql-1.11.1-1.el7.noarch
tfm-rubygem-hammer_cli_foreman-0.6.2-1.el7.noarch
foreman-1.11.1-1.el7.noarch
foreman-cli-1.11.1-1.el7.noarch
tfm-rubygem-foreman_setup-3.1.0-1.fm1_11.el7.noarch
foreman-selinux-1.11.1-1.el7.noarch

[root@fox1 ~]# cat /etc/redhat-release
CentOS Linux release 7.2.1511 (Core)


Files

foreman.log foreman.log 629 KB Jonathon Anderson, 04/30/2016 12:33 AM

Related issues 1 (0 open1 closed)

Is duplicate of SELinux - Bug #14811: Passenger paths changed once again (RHEL7)ClosedLukas Zapletal04/26/2016Actions
Actions #1

Updated by Anonymous almost 8 years ago

  • Is duplicate of Bug #14811: Passenger paths changed once again (RHEL7) added
Actions #2

Updated by Anonymous almost 8 years ago

  • Status changed from New to Duplicate

Please see #14811

Actions

Also available in: Atom PDF