tripleo-ci-centos-8-undercloud-ffu-wallaby and periodic-tripleo-ci-centos-8-undercloud-upgrade-ffu-wallaby jobs are failing with following error during ffu_undercloud_upgrade.
```
Ensure DNF modules have the right stream | undercloud | item={'distribution_version': '8', 'module': 'container-tools', 'stream': '3.0'} | error={"ansible_loop_var": "item", "changed": false, "failures": [], "item": {"distribution_version": "8", "module": "container-tools", "stream": "3.0"}, "msg": "Depsolve Error occured: \n Problem: package container-selinux-2:2.189.0-1.module_el8.7.0+1217+ea57d1f1.noarch conflicts with udica < 0.2.6-1 provided by udica-0.2.4-1.module_el8.7.0+1217+ea57d1f1.noarch\n - cannot install the best candidate for the job", "rc": 1, "results": []}
```
The last passing job is : https://zuul.opendev.org/t/openstack/build/288474fb55c0472c9cb68df93397dcd1 - 2022-09-23 15:43:35
Passing jobs rpm:
container-selinux-2.167.0-1.module_el8.6.0+1107+d59a301b.noarch
udica-0.2.4-1.module_el8.5.0+736+58cc1a5a.noarch
Logs:
[1]. https://dfa69071052ecd0db9f1-f81dd8fd4f9add75179602ffbcf81b7d.ssl.cf2.rackcdn.com/855187/4/gate/tripleo-ci-centos-8-undercloud-ffu-wallaby/24b5132/logs/undercloud/home/zuul/ffu_undercloud_upgrade.log
[2]. https://logserver.rdoproject.org/openstack-periodic-integration-stable1-cs8/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-8-undercloud-upgrade-ffu-wallaby/0d4ca0f/logs/undercloud/home/zuul/ffu_undercloud_upgrade.log
https:/ /koji.mbox. centos. org/koji/ buildinfo? buildID= 22871
```
* Wed Dec 01 2021 Vit Mojzis <email address hidden> - 0.2.6-3
- Make sure each section of the inspect exists before accessing (#2027662)
* Tue Sep 21 2021 Vit Mojzis <email address hidden> - 0.2.6-2 2.4-1.module_ el8.7.0+ 1217+ea57d1f1. noarch selinux- 2:2.189. 0-1.module_ el8.7.0+ 1217+ea57d1f1. noarch conflicts with udica < 0.2.6-1 provided by udica-0. 2.4-1.module_ el8.7.0+ 1217+ea57d1f1. noarch selinux- 2:2.189. 0-1.module_ el8.7.0+ 1217+ea57d1f1. noarch conflicts with udica < 0.2.6-1 provided by udica-0. 2.4-1.module_ el8.4.0+ 786+4668b267. noarch selinux- 2:2.189. 0-1.module_ el8.7.0+ 1217+ea57d1f1. noarch conflicts with udica < 0.2.6-1 provided by udica-0. 2.4-1.module_ el8.5.0+ 736+58cc1a5a. noarch
- Require container-selinux shipping policy templates (#2005866)
```
We need to downgrade container-selinux to work with older udica.
It can be easily reproducible in cs8 container.
```
dnf module enable container-tools:3.0
dnf install udica
dnf install container-selinux
```
Traceback
```
[root@d4dd1a0933f0 /]# dnf install container-selinux
Last metadata expiration check: 0:04:21 ago on Mon Sep 26 05:53:03 2022.
Error:
Problem: problem with installed package udica-0.
- package container-
- package container-
- package container-
- cannot install the best candidate for the job
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
``` selinux- 2:2.189. 0-1.module_ el8.7.0+ 1217+ea57d1f1. noarch in order to get the job passing.
We need to exclude container-