lxc: lxc-test-parse-config-file failure (expected value and retrieved value do not match)

[Andrea Righi]

I'm getting the following error with the lxc kernel autotest on impish:

08:46:04 DEBUG| parse_config_file.c: 60: set_get_compare_clear_save_load: expected value "system_u:system_r:lxc_t:s0:c22" and retrieved value "" for config key "lxc.selinux.context" do not match
08:46:04 DEBUG|
08:46:04 DEBUG| parse_config_file.c: 382: main: lxc.selinux.context
08:46:06 INFO | ERROR ubuntu_lxc.lxc-test-parse-config-file ubuntu_lxc.lxc-test-parse-config-file timestamp=1631090766 localtime=Sep 08 08:46:06 Command failed, rc=1, Command returned non-zero exit status
  * Command:
      /tmp/lxc-pkg-ubuntu/src/tests/lxc-test-parse-config-file
  Exit status: 1
  Duration: 0.0550210475922

  stderr:
  parse_config_file.c: 60: set_get_compare_clear_save_load: expected value "system_u:system_r:lxc_t:s0:c22" and retrieved value "" for config key "lxc.selinux.context" do not match

  parse_config_file.c: 382: main: lxc.selinux.context

I haven't investigated very much, but it looks like a (mis)configuration change / issue. Does it ring any bell? Otherwise I'll investigate more.

[Christian Brauner (cbrauner)]

This was caused by a recent change to how we handle selinux and apparmor config options when LXC is compiled without support. I've sent
https://github.com/lxc/lxc/pull/3969
specific to stable-4.0.

[Andrea Righi (arighi)]

Makes sense, thanks for looking at this Christian!

[Tim Gardner (timg-tpi)]

Also observed with impish linux-aws 5.13.0-1000.1

[Krzysztof Kozlowski (krzk)]

Found on impish/linux-oracle/5.13.0-1005.7

[Launchpad Janitor (janitor)]

This bug was fixed in the package lxc - 1:4.0.12-0ubuntu1

---------------
lxc (1:4.0.12-0ubuntu1) jammy; urgency=medium

  * Cherry-pick upstream bugfixes (stable-4.0):
    - 0002-lxc-checkconfig-Fix-bashism.patch
    - 0003-doc-Fix-reverse-allowlist-denylist.patch (LP: #1957934)

  * New upstream bugfix release (4.0.12):
    (https://discuss.linuxcontainers.org/t/lxc-4-0-12-has-been-released/13288)
    - Fixed CRIU restoration of containers with pre-created veth interfaces
    - Fixed issue with kernels lacking SMT support
    - Extended cgroup2 config options in lxc.mount.auto (cgroup2)
    - lxc-download now relies on HTTPS for validation (avoids GPG issues)

  * New upstream bugfix release (4.0.11)
    (LP: #1943441, LP: #1938771, LP: #1891903):
    (https://discuss.linuxcontainers.org/t/lxc-4-0-11-has-been-released/12427)
    - Core scheduling support (lxc.sched.core)
    - riscv64 support in lxc.arch
    - Significantly improved bash completion profile
    - Greater use of the new VFS mount API (when supported by the kernel)
    - Fix containers with empty network namespaces
    - Handle kernels that lack TIOCGPTPEER
    - Improve CPU bitmask/id handling (handle skipped CPU numbers)
    - Reworked the tests to run offline

  * Bump to debhelper 12 (allows focal SRUs)
  * Bump standards to 4.6.0.1
  * Add lintian overrides for incorrect bashism detection
  * Remove bash completion install logic (now done upstream)

 -- Stéphane Graber <email address hidden> Wed, 02 Feb 2022 20:48:39 -0500

[Kleber Sacilotto de Souza (kleber-souza)]

The issue is still reproducible in Impish (lxc 1:4.0.12-0ubuntu1~21.10.1)

[Po-Hsu Lin (cypressyew)]

This test is still failing on Focal 5.15 with lxc 1:4.0.12-0ubuntu1~20.04.1

Running '/tmp/lxc-pkg-ubuntu/src/tests/lxc-test-parse-config-file'
 parse_config_file.c: 63: set_get_compare_clear_save_load: expected value "system_u:system_r:lxc_t:s0:c22" and retrieved value "" for config key "lxc.selinux.context" do not match

 parse_config_file.c: 49: set_get_compare_clear_save_load: failed to set config item "lxc.seccomp.profile" to "/some/seccomp/file"

 parse_config_file.c: 580: main: lxc.seccomp.profile

[Luke Nowakowski-Krijger (lukenow)]

Failing with 2022.06.20/focal/linux-fips/5.4.0-1057.65

parse_config_file.c: 63: set_get_compare_clear_save_load: expected value "system_u:system_r:lxc_t:s0:c22" and retrieved value "" for config key "lxc.selinux.context" do not match
parse_config_file.c: 49: set_get_compare_clear_save_load: failed to set config item "lxc.seccomp.profile" to "/some/seccomp/file"
parse_config_file.c: 580: main: lxc.seccomp.profile

[Cory Todd (corytodd)]

Failing with 2022.07.11/focal/linux-fips/5.4.0-1058.66

parse_config_file.c: 63: set_get_compare_clear_save_load: expected value "system_u:system_r:lxc_t:s0:c22" and retrieved value "" for config key "lxc.selinux.context" do not match
parse_config_file.c: 49: set_get_compare_clear_save_load: failed to set config item "lxc.seccomp.profile" to "/some/seccomp/file"
parse_config_file.c: 580: main: lxc.seccomp.profile

[Cory Todd (corytodd)]

Failing with 2022.08.08/focal/linux-fips/5.4.0-1060.68 (note that 1059.67 was a security release so we don't have test data for it)

[Cory Todd (corytodd)]

Failing with 2022.08.29/focal/linux-fips/5.4.0-1061.69

[Cory Todd (corytodd)]

Failing with 2022.09.19/focal/linux-fips/5.4.0-1062.70