-
-
Notifications
You must be signed in to change notification settings - Fork 339
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
apply_k3s_selinux fails on MicroOS snapshot of 2023-01-23 #528
Comments
If I make this modification in
I confirm that the cluster comes up. However, this made me notice an error message which is probably leading closer to the issue:
However, this message does not block the rest of the installation, it just continues. |
I noticed this just a few minutes ago. I'm searching the repository history but still haven't quite grasped the rationale for skipping the automatic selinux installation that comes with the k3s installer. I haven't learned the consequences yet, but letting the k3s install script include it produces no error. Edit: oh maybe it's just to allow modification to the configurations before the k3s service is started? |
Same thing here, guess something changed outside of this script (either MicroOS or K3S script) since the latest version worked 2 days ago flawlessly. |
We probably just need to update the k3s SELinux RPM! On it. |
@valkenburg-prevue-ch You are right something changed with MicroOS, breaking the k3s-SELinux install. |
@thebearingedge In the current state of things, this would have failed too. We just install it manually and apply the policy ourselves because MicroOS installs all new packages to a new Snapshot, and requires a reboot. We remove the need for that extra reboot, but installing the package manually before k3s is installed. |
@valkenburg-prevue-ch This basically disables k3s-selinux. It a neat trick but not ideal. I have signaled our problem on the k3s-selinux repo. It turns out even folks on Fedora CoreOS are having the exact same error! So not specific to MicroOS. |
Ok, the solution has been found, thanks to the tips given by the maintainer of It required a downgrade of |
Oh nooooo! The fix is broken today. The line:
fails because Reopening the issue. |
Ok, I missed one more commit of the master branch, it seems fixed there already. Thanks @mysticaltech and @aleksasiriski . |
Apologies folks, I screwed up the link. Thanks for fixing it @aleksasiriski 🙏 |
This error hits again on a fresh MicroOS image:
Anyone else experiencing this? |
The script
apply_k3s_selinux = ["/sbin/semodule -v -i /usr/share/selinux/packages/k3s.pp"]
fails as of this morning, with the following output:I have the strong suspicion that something changed in microos, as the image has been updated yesterday:
![Screenshot 2023-01-24 at 11 16 26](https://user-images.githubusercontent.com/116259817/214265982-19ab2c41-a509-4557-824c-d434a5836e6e.png)
Does anyone know how to work around this?
The text was updated successfully, but these errors were encountered: