New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cockpit.service fails to start on non-selinux systems #3206

Closed
mbiebl opened this Issue Nov 21, 2015 · 2 comments

Comments

Projects
None yet
2 participants
@mbiebl
Contributor

mbiebl commented Nov 21, 2015

Version: 0.84

After the update from 0.83 to 0.84, cockpit.service fails to start

# systemctl status cockpit.service 
● cockpit.service - Cockpit Web Service
   Loaded: loaded (/lib/systemd/system/cockpit.service; static; vendor preset: enabled)
   Active: failed (Result: exit-code) since Sa 2015-11-21 15:46:20 CET; 1min 38s ago
     Docs: man:cockpit-ws(8)
  Process: 2769 ExecStartPre=/usr/sbin/remotectl certificate --ensure --user=root --group= --selinux-type= (code=exited, status=1/FAILURE)

Nov 21 15:46:20 pluto systemd[1]: Starting Cockpit Web Service...
Nov 21 15:46:20 pluto remotectl[2769]: /usr/bin/chcon: can't apply partial context to unlabeled file ‘/etc/cockpit/ws-certs.d/0-self-signed.cert’
Nov 21 15:46:20 pluto remotectl[2769]: remotectl: couldn't change SELinux type context '' for certificate: /etc/cockpit/ws-certs.d/0-self-signed.cert: Child process exited with code 1
Nov 21 15:46:20 pluto systemd[1]: cockpit.service: Control process exited, code=exited status=1
Nov 21 15:46:20 pluto systemd[1]: Failed to start Cockpit Web Service.
Nov 21 15:46:20 pluto systemd[1]: cockpit.service: Unit entered failed state.
Nov 21 15:46:20 pluto systemd[1]: cockpit.service: Failed with result 'exit-code'.

SELinux is not active on this Debian system.

One could use ExecStartPre=-/usr/sbin/remotectl ... to ignore the failure from remotectl, but maybe it's better to make the use of chcon dependend on whether selinux is enabled during runtime

@mbiebl

This comment has been minimized.

Show comment
Hide comment
@mbiebl

mbiebl Nov 21, 2015

Contributor

Already fixed by 6246c16

Contributor

mbiebl commented Nov 21, 2015

Already fixed by 6246c16

@mbiebl mbiebl closed this Nov 21, 2015

@stefwalter

This comment has been minimized.

Show comment
Hide comment
@stefwalter

stefwalter Nov 23, 2015

Contributor

This is a good reason why we need to have Debian testing (in this case non-SELinux system testing) upstream.

Contributor

stefwalter commented Nov 23, 2015

This is a good reason why we need to have Debian testing (in this case non-SELinux system testing) upstream.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment