I get this error on a new minimal VM install with all LVM disks except '/boot': -- root@img-ults18:/var/log# lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT loop0 7:0 0 89.1M 1 loop /snap/core/8268 loop1 7:1 0 88.5M 1 loop /snap/core/7270 sda 8:0 0 1G 0 disk ├─sda1 8:1 0 1M 0 part └─sda2 8:2 0 1021M 0 part /boot sdb 8:16 0 32G 0 disk ├─VGroot-LVroot 253:0 0 7G 0 lvm / ├─VGroot-LVtmp 253:1 0 3G 0 lvm /tmp ├─VGroot-LVvar 253:2 0 4G 0 lvm /var ├─VGroot-LVvartmp 253:3 0 3G 0 lvm /var/tmp ├─VGroot-VGlog 253:4 0 4G 0 lvm /var/log ├─VGroot-LVaudit 253:5 0 2G 0 lvm /var/log/audit ├─VGroot-LVswap 253:6 0 4G 0 lvm [SWAP] └─VGroot-LVhome 253:7 0 5G 0 lvm /home sr0 11:0 1 1024M 0 rom root@img-ults18:/var/log# pvs PV VG Fmt Attr PSize PFree /dev/sdb VGroot lvm2 a-- <32.00g 0 root@img-ults18:/var/log# vgs VG #PV #LV #SN Attr VSize VFree VGroot 1 8 0 wz--n- <32.00g 0 root@img-ults18:/var/log# lvs -a LV VG Attr LSize Pool Origin Data% Meta% Move Log Cpy%Sync Convert LVaudit VGroot -wi-ao---- 2.00g LVhome VGroot -wi-ao---- <5.00g LVroot VGroot -wi-ao---- 7.00g LVswap VGroot -wi-ao---- 4.00g LVtmp VGroot -wi-ao---- 3.00g LVvar VGroot -wi-ao---- 4.00g LVvartmp VGroot -wi-ao---- 3.00g VGlog VGroot -wi-ao---- 4.00g -- ... 0 packages can be updated. 0 updates are security updates. No mail. Last login: Thu Jan 9 21:09:04 2020 from 137.82.124.99 root@img-ults18:~# root@img-ults18:~# apt-get install selinux Reading package lists... Done Building dependency tree Reading state information... Done The following additional packages will be installed: policycoreutils selinux-policy-dummy selinux-utils The following packages will be REMOVED: apparmor snapd The following NEW packages will be installed: policycoreutils selinux selinux-policy-dummy selinux-utils 0 upgraded, 4 newly installed, 2 to remove and 0 not upgraded. Need to get 544 kB of archives. After this operation, 62.7 MB disk space will be freed. Do you want to continue? [Y/n] Get:1 http://mirror.it.ubc.ca/ubuntu bionic/universe amd64 selinux-utils amd64 2.7-2build2 [81.7 kB] Get:2 http://mirror.it.ubc.ca/ubuntu bionic/universe amd64 policycoreutils amd64 2.7-1 [450 kB] Get:3 http://mirror.it.ubc.ca/ubuntu bionic/universe amd64 selinux all 1:0.11 [11.2 kB] Get:4 http://mirror.it.ubc.ca/ubuntu bionic/universe amd64 selinux-policy-dummy all 0.1 [1,730 B] Fetched 544 kB in 0s (7,670 kB/s) Preconfiguring packages ... ... (Reading database ... 102901 files and directories currently installed.) Removing snapd (2.42.1+18.04) ... Removing apparmor (2.12-4ubuntu5.1) ... Selecting previously unselected package selinux-utils. (Reading database ... 102812 files and directories currently installed.) Preparing to unpack .../selinux-utils_2.7-2build2_amd64.deb ... Unpacking selinux-utils (2.7-2build2) ... Selecting previously unselected package policycoreutils. Preparing to unpack .../policycoreutils_2.7-1_amd64.deb ... Unpacking policycoreutils (2.7-1) ... Selecting previously unselected package selinux. Preparing to unpack .../selinux_1%3a0.11_all.deb ... Unpacking selinux (1:0.11) ... Selecting previously unselected package selinux-policy-dummy. Preparing to unpack .../selinux-policy-dummy_0.1_all.deb ... Unpacking selinux-policy-dummy (0.1) ... Setting up selinux-utils (2.7-2build2) ... Setting up selinux-policy-dummy (0.1) ... Setting up policycoreutils (2.7-1) ... selinux-autorelabel-mark.service is a disabled or a static unit, not starting it. Setting up selinux (1:0.11) ... Sourcing file `/etc/default/grub' Generating grub configuration file ... File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2167: /usr/sbin/grub-probe File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2167: /usr/sbin/grub-probe File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2172: /usr/sbin/grub-probe File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2172: /usr/sbin/grub-probe File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2177: /usr/sbin/grub-probe File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2177: /usr/sbin/grub-probe File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2182: /usr/sbin/grub-probe File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2182: /usr/sbin/grub-probe File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2218: /usr/sbin/grub-probe File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2218: /usr/sbin/grub-probe Found linux image: /boot/vmlinuz-4.15.0-74-generic Found initrd image: /boot/initrd.img-4.15.0-74-generic Found linux image: /boot/vmlinuz-4.15.0-72-generic Found initrd image: /boot/initrd.img-4.15.0-72-generic File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2545: /usr/sbin/grub-probe File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2545: /usr/sbin/grub-probe File descriptor 3 (pipe:[34729]) leaked on lvs invocation. Parent PID 2665: /bin/sh done update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults Processing triggers for ureadahead (0.100.0-21) ... Processing triggers for systemd (237-3ubuntu10.33) ... Processing triggers for man-db (2.8.3-2ubuntu0.1) ... Processing triggers for mime-support (3.60ubuntu1) ... Processing triggers for initramfs-tools (0.130ubuntu3.9) ... update-initramfs: Generating /boot/initrd.img-4.15.0-74-generic I: The initramfs will attempt to resume from /dev/dm-6 I: (/dev/mapper/VGroot-LVswap) I: Set the RESUME variable to override this. -- The system doesn't boot after this: -- Being: Running /scripts/init-bottom ... mkdir: can't create directory '/root/selinux': Read-only file system done. audit: type=1404 audit(1578604588.526:2): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 SELinux: Could not open policy file <= /etc/selinux/default/policy/policy.31: No such file or directory systemd[1]: Failed to load SELinux policy. [!!!!!!] Failed to load SELinux policy, freezing. systemd[1]: Freezing execution. -- After changing the resume policy to 'none' and updating initramfs, the system will boot, but with a long delay. There are also now very long delays to ssh logins. I've attached the syslog from the boot.