gate-tripleo-buildimage-overcloud-full-centos-7 is broken on missing semanage

Bug #1707788 reported by Steve Baker on 2017-07-31
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
diskimage-builder
Undecided
Unassigned
tripleo
Critical
Steve Baker

Bug Description

http://logs.openstack.org/83/489083/1/check/gate-tripleo-buildimage-overcloud-full-centos-7/ed940d9/console.html

2017-07-31 04:28:45.651506 | dib-run-parts Mon Jul 31 04:28:45 UTC 2017 Running /tmp/dib_build.rnaFqi1E/hooks/cleanup.d/99-selinux-fixfiles-restore
2017-07-31 04:28:45.680694 | sudo: semanage: command not found

I think the root cause is this change:
  https://review.openstack.org/#/c/487520

it turns out that semanage is not actually installed, it comes from package policycoreutils-python

Changed in tripleo:
status: New → Triaged
importance: Undecided → Critical
assignee: nobody → Steve Baker (steve-stevebaker)
milestone: none → pike-rc1

Related fix proposed to branch: master
Review: https://review.openstack.org/489434

Change abandoned by Steve Baker (<email address hidden>) on branch: master
Review: https://review.openstack.org/489423
Reason: Idd4ae71ee6deee84604823b6b5dc4a845f316e01 looks like a better fix

Reviewed: https://review.openstack.org/489434
Committed: https://git.openstack.org/cgit/openstack/diskimage-builder/commit/?id=818b75af41b99b7573d3d9da132c7b866a2ac2a1
Submitter: Jenkins
Branch: master

commit 818b75af41b99b7573d3d9da132c7b866a2ac2a1
Author: Ian Wienand <email address hidden>
Date: Tue Aug 1 09:47:50 2017 +1000

    Move selinux packages to redhat-common

    Change I008f8bbc9c8414ce948c601e3907e27764e15a52 has shown that we
    build redhat images without the "semange" tool available, which comes
    from the policycoreutils-python package (see also
    I3f9e2c322d042a5dddba33451c0fc21a4d32a88a).

    I403e7806ae10d5dd96d0727832f4da20e34b94c7 added some of the selinux
    libraries to yum-minimal for ansible support, but not to others.

    Given both these changes, it seems that selinux[-targeted],
    libselinux[-python] and policycoreutils[-python] can reasonably
    considered part of all base images. Move the selinux related packages
    into redhat-common.

    This also adds it explicitly to install_test_deps.sh. It was actually
    being dragged in by the docker install, but is a required component
    for building (should be in bindep, but not there with that yet).

    Change-Id: Idd4ae71ee6deee84604823b6b5dc4a845f316e01
    Related-Bug: #1707788

Fix proposed to branch: master
Review: https://review.openstack.org/490265

Changed in tripleo:
status: Triaged → In Progress
tags: added: ci
tags: added: alert

Reviewed: https://review.openstack.org/490265
Committed: https://git.openstack.org/cgit/openstack/python-tripleoclient/commit/?id=1b6585494f925ac64aba14ea362f1d58673ae291
Submitter: Jenkins
Branch: master

commit 1b6585494f925ac64aba14ea362f1d58673ae291
Author: Steve Baker <email address hidden>
Date: Thu Aug 3 13:13:02 2017 +1200

    Install policycoreutils-python

    This will allow image build test jobs to run semanage, which is
    required on the host for selinux based image building.

    Change-Id: I5da210156aa589ab69df1c0dea8567522d4004dd
    Closes-Bug: #1707788

Changed in tripleo:
status: In Progress → Fix Released

Reviewed: https://review.openstack.org/490504
Committed: https://git.openstack.org/cgit/openstack/python-tripleoclient/commit/?id=70103905c43f9dfa3e56c21311423ff6ee69e861
Submitter: Jenkins
Branch: stable/pike

commit 70103905c43f9dfa3e56c21311423ff6ee69e861
Author: Steve Baker <email address hidden>
Date: Thu Aug 3 13:13:02 2017 +1200

    Install policycoreutils-python

    This will allow image build test jobs to run semanage, which is
    required on the host for selinux based image building.

    Change-Id: I5da210156aa589ab69df1c0dea8567522d4004dd
    Closes-Bug: #1707788
    (cherry picked from commit 1b6585494f925ac64aba14ea362f1d58673ae291)

tags: added: in-stable-pike

Reviewed: https://review.openstack.org/490645
Committed: https://git.openstack.org/cgit/openstack/python-tripleoclient/commit/?id=8dbebd4e79c04878abf432d90285d3ba1fcc44e6
Submitter: Jenkins
Branch: stable/ocata

commit 8dbebd4e79c04878abf432d90285d3ba1fcc44e6
Author: Steve Baker <email address hidden>
Date: Thu Aug 3 13:13:02 2017 +1200

    Install policycoreutils-python

    This will allow image build test jobs to run semanage, which is
    required on the host for selinux based image building.

    Change-Id: I5da210156aa589ab69df1c0dea8567522d4004dd
    Closes-Bug: #1707788
    (cherry picked from commit 1b6585494f925ac64aba14ea362f1d58673ae291)

tags: added: in-stable-ocata

Reviewed: https://review.openstack.org/490646
Committed: https://git.openstack.org/cgit/openstack/python-tripleoclient/commit/?id=ac73d7efda693c1ee1afa6c050d221fecec77af5
Submitter: Jenkins
Branch: stable/newton

commit ac73d7efda693c1ee1afa6c050d221fecec77af5
Author: Steve Baker <email address hidden>
Date: Thu Aug 3 13:13:02 2017 +1200

    Install policycoreutils-python

    This will allow image build test jobs to run semanage, which is
    required on the host for selinux based image building.

    Change-Id: I5da210156aa589ab69df1c0dea8567522d4004dd
    Closes-Bug: #1707788
    (cherry picked from commit 1b6585494f925ac64aba14ea362f1d58673ae291)

tags: added: in-stable-newton

This issue was fixed in the openstack/python-tripleoclient 5.4.3 release.

This issue was fixed in the openstack/python-tripleoclient 6.2.1 release.

This issue was fixed in the openstack/python-tripleoclient 7.3.0 release.

This issue was fixed in the openstack/python-tripleoclient 8.0.0 release.

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers