Bug #9805
closedPuppet master generates lots of invalid context messages
Description
During installation on RHEL7 I see this failure once, then catalog is compiled successfully:
Mar 13 10:11:07 fseven puppet-master[20182]: Failed to find fseven.zzz.lan via exec: Execution of '/etc/puppet/node.rb fseven.zzz.lan' returned 1:
Looks like this is harmless, but we should investigate why this happens and if we can prevent this.
Updated by Dominic Cleal over 9 years ago
- Category deleted (
foreman-installer script) - Status changed from New to Need more information
Updated by Bryan Kearney almost 8 years ago
- Status changed from Need more information to New
From downstream:
vrempet@li-lc-1017 ~
$ grep -c /etc/selinux/targeted/contexts/files/file_contexts /var/log/messages
512
vrempet@li-lc-1017 ~
$ grep /etc/selinux/targeted/contexts/files/file_contexts /var/log/messages | tail -n 5
Oct 5 12:45:11 li-lc-1017 puppet-master9026: /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:puppet_etc_t:s0
Oct 5 12:45:38 li-lc-1017 puppet-master9046: /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:puppet_etc_t:s0
Oct 5 12:45:38 li-lc-1017 puppet-master9046: /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:puppet_etc_t:s0
Oct 5 12:45:38 li-lc-1017 puppet-master9046: /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:puppet_etc_t:s0
Oct 5 12:45:38 li-lc-1017 puppet-master9046: /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:puppet_etc_t:s0
vrempet@li-lc-1017 ~
$ uptime
12:55:58 up 13 min, 1 user, load average: 0.01, 0.51, 0.65
Updated by Dominic Cleal almost 8 years ago
- Status changed from New to Need more information
Does the execution of node.rb outside of the puppet-master process work or fail? If it fails, please provide the Foreman logs.
Are there any AVC denials? I'm unsure that those log messages are relevant or show anything relating to the issue description.
The logs don't appear to come from the same host, are these definitely demonstrating the same underlying bug?
Updated by Lukas Zapletal over 7 years ago
- Project changed from Installer to SELinux
- Subject changed from Initial ENC run fails to Puppet master generates lots of invalid context messages
- Category set to General Foreman
- Status changed from Need more information to Assigned
- Assignee set to Lukas Zapletal
We have been able to track the issue down with help of SELinux team. It's a long story, I will provide patch soon. For more details see:
Updated by The Foreman Bot over 7 years ago
- Status changed from Assigned to Ready For Testing
- Pull request https://github.com/theforeman/foreman-selinux/pull/67 added
Updated by Daniel Lobato Garcia about 7 years ago
- Translation missing: en.field_release set to 287
Updated by Lukas Zapletal about 7 years ago
- Status changed from Ready For Testing to Closed
- % Done changed from 0 to 100
Applied in changeset 31ebc8e73a03dfc32aed8a9c6929404b00fa4f50.