Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

coreos-printk-quiet.service always fails after first boot when selinux=0 #1304

Closed
queeup opened this issue Sep 23, 2022 · 6 comments
Closed
Labels

Comments

@queeup
Copy link

queeup commented Sep 23, 2022

Describe the bug
coreos-printk-quiet.service always fails

Reproduction steps

  1. Restart
  2. Login via ssh or check coreos-printk-quiet.service status

Expected behavior
coreos-printk-quiet.service should success

Actual behavior
First boot coreos-printk-quiet.service success but after that every boot it fails.

System details

  • Bare Metal
  • Raspberry Pi 3 & 4
  • Fedora CoreOS 37.20220918.1.1

Ignition config

variant: fcos
version: 1.4.0
passwd:
  users:
    - name: core
      groups:
        - docker
      ssh_authorized_keys:
        - ssh-ed25519 VeRySeCrEtKey coreos
      # Using Password Authentication:
      # https://docs.fedoraproject.org/en-US/fedora-coreos/authentication/#_using_password_authentication
      # podman run -ti --rm quay.io/coreos/mkpasswd --method=yescrypt
      password_hash: qweqwerwterterreyryrwrwqe
systemd:
  units:
    - name: rpm-ostree-install-tailscale.service
      enabled: true
      contents: |
        [Unit]
        Description=Layer tailscale with rpm-ostree
        Wants=network-online.target
        After=network-online.target
        # We run before `zincati.service` to avoid conflicting rpm-ostree
        # transactions.
        Before=zincati.service
        ConditionPathExists=!/var/lib/%N.stamp

        [Service]
        Type=oneshot
        RemainAfterExit=yes
        # `--allow-inactive` ensures that rpm-ostree does not return an error
        # if the package is already installed. This is useful if the package is
        # added to the root image in a future Fedora CoreOS release as it will
        # prevent the service from failing.
        ExecStart=/usr/bin/rpm-ostree install --apply-live --allow-inactive tailscale
        ExecStart=/usr/bin/systemctl enable --now tailscaled.service
        ExecStart=/usr/bin/tailscale up --ssh --authkey=tskey-1234567890-qwertyuıop
        ExecStart=/bin/touch /var/lib/%N.stamp

        [Install]
        WantedBy=multi-user.target
    - name: modify-system-files.service
      enabled: true
      contents: |
        [Unit]
        Description=Modifying system files
        # We run before `zincati.service` to avoid conflicting rpm-ostree
        # transactions.
        Before=zincati.service
        ConditionPathExists=!/var/lib/%N.stamp

        [Service]
        Type=oneshot
        RemainAfterExit=yes
        ExecStart=/usr/bin/sed -i 's/enabled=1/enabled=0/' /etc/yum.repos.d/fedora-cisco-openh264.repo
        ExecStart=/bin/touch /var/lib/%N.stamp

        [Install]
        WantedBy=multi-user.target
storage:
  directories:
    - path: /home/core/.config
      user:
        name: core
      group:
        name: core
    - path: /home/core/.config/systemd
      user:
        name: core
      group:
        name: core
    - path: /home/core/.config/systemd/user
      user:
        name: core
      group:
        name: core
    - path: /home/core/.config/systemd/user/default.target.wants
      user:
        name: core
      group:
        name: core
    - path: /home/core/.config/systemd/user/timers.target.wants
      user:
        name: core
      group:
        name: core
    - path: /home/core/.config/systemd/user/sockets.target.wants
      user:
        name: core
      group:
        name: core
  files:
    # Setting a Hostname:
    # https://docs.fedoraproject.org/en-US/fedora-coreos/hostname/
    - path: /etc/hostname
      mode: 0644
      contents:
        inline: coreos
    # Turkish keyboard layout:
    # Manulaly change it: sudo localectl set-keymap tr
    - path: /etc/vconsole.conf
      mode: 0644
      contents:
        inline: KEYMAP=tr
    # Tailscale repo:
    - path: /etc/yum.repos.d/tailscale.repo
      mode: 0644
      contents:
        inline: |
          [tailscale-stable]
          name=Tailscale stable
          baseurl=https://pkgs.tailscale.com/stable/fedora/$basearch
          enabled=1
          type=rpm
          repo_gpgcheck=0
          gpgcheck=0
          gpgkey=https://pkgs.tailscale.com/stable/fedora/repo.gpg
    # Allow users in wheel group reboot and poweroff without authentication
    - path: /etc/polkit-1/rules.d/49-nopasswd_limited.rules
      mode: 0644
      contents:
        inline: |
          /* Allow members of the wheel group to execute the defined actions
          * without password authentication, similar to "sudo NOPASSWD:"
          */
          polkit.addRule(function(action, subject) {
              if ((action.id == "org.freedesktop.login1.reboot" ||
                  action.id == "org.freedesktop.login1.power-off") &&
                  subject.isInGroup("wheel"))
              {
                return polkit.Result.YES;
              }
          });
    # user-level cntainers systemd unit
    # Neet to start manually
    # systemctl --user enable --now container@<name of container>
    - path: /home/core/.config/systemd/user/[email protected]
      user:
        name: core
      group:
        name: core
      mode: 0644
      contents:
        inline: |
          # Dynamic container systemd service
          # Files:
          # ~/.config/systemd/user/[email protected]
          # ~/.config/container@<name of container>.conf
          # Usage:
          # command: systemctl --user start container@<name of container>
          # config: container@<name of container>.conf

          [Unit]
          Description=Podman %n
          Documentation=man:podman-generate-systemd(1)
          Wants=network-online.target
          After=network-online.target
          RequiresMountsFor=%t/containers

          [Service]
          Environment=PODMAN_SYSTEMD_UNIT=%n
          EnvironmentFile=%h/.config/%N.conf
          Restart=always
          # Raspberry pi's are slow:
          # Set start timeout high for RPi-3.
          # For RPi-4 can be commented out.
          TimeoutStartSec=180
          TimeoutStopSec=70
          ExecStartPre=/bin/rm -f %t/%n.ctr-id
          ExecStartPre=-/bin/sh -c "/usr/bin/podman volume exists %i_data || /usr/bin/podman volume create %i_data"
          ExecStart=/usr/bin/podman run --cidfile=%t/%n.ctr-id --cgroups=no-conmon --sdnotify=conmon \
              --label "io.containers.autoupdate=registry" \
              --detach \
              --name %i \
              --hostname %i \
              # Map the service owner host UID into the container 
              # --userns=keep-id \
              # --user %U:%G \
              $PODMAN_RUN_ARGS \
              $IMAGE \
              $COMMAND
          ExecStop=/usr/bin/podman stop --ignore --cidfile=%t/%n.ctr-id
          ExecStopPost=/usr/bin/podman rm -f --ignore --cidfile=%t/%n.ctr-id
          Type=notify
          NotifyAccess=all

          [Install]
          WantedBy=default.target
    - path: /home/core/.config/container@<name of container>.conf.sample
      user:
        name: core
      group:
        name: core
      mode: 0644
      contents:
        inline: |
          # do not use this args [--detach, --name, --hostname]
          PODMAN_RUN_ARGS="--publish 8000:8000
                           --publish 9443:9443
                           --volume /run/user/1000/podman/podman.sock:/var/run/docker.sock
                           --volume portainer_data:/data"
          IMAGE=docker.io/portainer/portainer-ce
          
          COMMAND=--hide-label hide=true
    - path: /home/core/.config/[email protected]
      user:
        name: core
      group:
        name: core
      mode: 0644
      contents:
        inline: |
          # do not use this args [--detach, --name, --hostname]
          PODMAN_RUN_ARGS="--label hide=true
                           --publish 9443:9443
                           --volume /run/user/1000/podman/podman.sock:/var/run/docker.sock
                           --volume portainer_data:/data"
          IMAGE=docker.io/portainer/portainer-ce
          
          COMMAND=--hide-label hide=true
    - path: /home/core/.config/[email protected]
      user:
        name: core
      group:
        name: core
      mode: 0644
      contents:
        inline: |
          # do not use this args [--detach, --name, --hostname]
          # show device conf as : podman exec -it wireguard /app/show-peer myPC
          PODMAN_RUN_ARGS="--label hide=true
                           --env PUID=1000
                           --env PGID=1000
                           --env TZ=Europe/London
                           --env PEERS=Test1
                           --env LOG_CONFS=true
                           --privileged
                           --cap-add=NET_ADMIN
                           --cap-add=SYS_MODULE
                           --publish 51820:51820/udp
                           --volume wireguard_data:/data
                           --volume /lib/modules:/lib/modules
                           --sysctl=\"net.ipv4.conf.all.src_valid_mark=1\""
          
          IMAGE=lscr.io/linuxserver/wireguard
          
          COMMAND=
    - path: /home/core/.config/[email protected]
      user:
        name: core
      group:
        name: core
      mode: 0644
      contents:
        inline: |
          # do not use this args [--detach, --name, --hostname]
          PODMAN_RUN_ARGS="--label hide=true
                           --volume $HOME/.config/inadyn.conf:/etc/inadyn.conf:ro"
          
          IMAGE=docker.io/troglobit/inadyn:latest
          
          COMMAND="--startup-delay=6"
    - path: /home/core/.config/inadyn.conf
      user:
        name: core
      group:
        name: core
      mode: 0644
      contents:
        inline: |
          # Inadyn v2.0 configuration file format
          period          = 3600
          #verify-address  = false

          provider [email protected] {
              password       = 12121212121212
              hostname       = 12121212121212.freemyip.com
          }
  links:
    - path: /etc/localtime
      target: ../usr/share/zoneinfo/Europe/Istanbul
    - path: /home/core/.config/systemd/user/sockets.target.wants/podman.socket
      user:
        name: core
      group:
        name: core
      target: /usr/lib/systemd/user/podman.socket
      hard: false
    - path: /home/core/.config/systemd/user/timers.target.wants/podman-auto-update.timer
      user:
        name: core
      group:
        name: core
      target: /usr/lib/systemd/user/podman-auto-update.timer
      hard: false

Additional information

ssh core@coreos
Last login: Fri Sep 23 19:17:24 from 100.100.100.100
Fedora CoreOS 37.20220918.1.1
[systemd]
Failed Units: 1
  coreos-printk-quiet.service
[core@coreos ~]$ journalctl -u coreos-printk-quiet.service
Aug 19 03:00:23 coreos-zgz systemd[1]: coreos-printk-quiet.service: Main process exited, code=exited, status=1/FAILURE
Aug 19 03:00:23 coreos-zgz systemd[1]: coreos-printk-quiet.service: Failed with result 'exit-code'.
Aug 19 03:00:23 coreos-zgz systemd[1]: Failed to start coreos-printk-quiet.service - CoreOS: Set printk To Level 4 (warn).
Aug 19 03:00:23 coreos-zgz bash[725]: chcon: failed to get security context of '/etc/sysctl.d': No data available
-- Boot e13d53114c214518816b56988d223f13 --
Aug 19 03:00:24 coreos-zgz bash[731]: chcon: failed to get security context of '/etc/sysctl.d': No data available
Aug 19 03:00:24 coreos-zgz systemd[1]: coreos-printk-quiet.service: Main process exited, code=exited, status=1/FAILURE
Aug 19 03:00:24 coreos-zgz systemd[1]: coreos-printk-quiet.service: Failed with result 'exit-code'.
Aug 19 03:00:24 coreos-zgz systemd[1]: Failed to start coreos-printk-quiet.service - CoreOS: Set printk To Level 4 (warn).
-- Boot 0eb9bc7be94b417b912ad994b6dd865a --
Aug 19 03:00:24 coreos-zgz bash[759]: chcon: failed to get security context of '/etc/sysctl.d': No data available
Aug 19 03:00:24 coreos-zgz systemd[1]: coreos-printk-quiet.service: Main process exited, code=exited, status=1/FAILURE
Aug 19 03:00:24 coreos-zgz systemd[1]: coreos-printk-quiet.service: Failed with result 'exit-code'.
Aug 19 03:00:24 coreos-zgz systemd[1]: Failed to start coreos-printk-quiet.service - CoreOS: Set printk To Level 4 (warn).
-- Boot 43373db56c41439680cad655c57a5ab2 --
Aug 19 03:00:35 coreos-zgz bash[737]: chcon: failed to get security context of '/etc/sysctl.d': No data available
-- Boot 48566a71d066435f8b45a09a4bfbafb4 --
Sep 23 13:40:51 coreos-zgz systemd[1]: coreos-printk-quiet.service: Deactivated successfully.
Sep 23 13:40:51 coreos-zgz systemd[1]: Stopped coreos-printk-quiet.service - CoreOS: Set printk To Level 4 (warn).
[core@coreos ~]$ systemctl status --full coreos-printk-quiet.service
× coreos-printk-quiet.service - CoreOS: Set printk To Level 4 (warn)
     Loaded: loaded (/usr/lib/systemd/system/coreos-printk-quiet.service; enabled; preset: enabled)
     Active: failed (Result: exit-code) since Fri 2022-08-19 03:00:35 +03; 1 month 5 days ago
       Docs: https://github.com/coreos/fedora-coreos-tracker/issues/1244
    Process: 735 ExecStart=/bin/bash -euo pipefail -c mkdir -p /run/sysctl.d && chcon --reference=/etc/sysctl.d /run/sysctl.d && >
   Main PID: 735 (code=exited, status=1/FAILURE)
        CPU: 43ms

Aug 19 03:00:35 coreos-zgz bash[737]: chcon: failed to get security context of '/etc/sysctl.d': No data available
[core@coreos ~]$ systemctl reset-failed coreos-printk-quiet.service 
==== AUTHENTICATING FOR org.freedesktop.systemd1.manage-units ====
Authentication is required to reset the "failed" state of 'coreos-printk-quiet.service'.
Authenticating as: CoreOS Admin (core)
Password: 
==== AUTHENTICATION COMPLETE ====
[core@coreos ~]$ systemctl status --full coreos-printk-quiet.service
○ coreos-printk-quiet.service - CoreOS: Set printk To Level 4 (warn)
     Loaded: loaded (/usr/lib/systemd/system/coreos-printk-quiet.service; enabled; preset: enabled)
     Active: inactive (dead) since Fri 2022-08-19 03:00:35 +03; 1 month 5 days ago
       Docs: https://github.com/coreos/fedora-coreos-tracker/issues/1244
    Process: 735 ExecStart=/bin/bash -euo pipefail -c mkdir -p /run/sysctl.d && chcon --reference=/etc/sysctl.d /run/sysctl.d && >
   Main PID: 735 (code=exited, status=1/FAILURE)
        CPU: 43ms

Aug 19 03:00:35 coreos-zgz bash[737]: chcon: failed to get security context of '/etc/sysctl.d': No data available
[core@coreos ~]$
@cgwalters
Copy link
Member

chcon: failed to get security context of '/etc/sysctl.d': No data available

I can't reproduce this in a stock qemu x86_64 config. Do you have SELinux disabled (e.g. selinux=0 on kernel cmdline?). Hm, no I just tried that and it doesn't reproduce then either.

My test version is slightly different but still close:

[root@cosa-devsh ~]# rpm-ostree status -b
State: idle
AutomaticUpdatesDriver: Zincati
  DriverState: active; periodically polling for updates (last checked Fri 2022-09-23 22:19:19 UTC)
BootedDeployment:
● fedora:fedora/x86_64/coreos/next
                  Version: 37.20220918.1.1 (2022-09-21T21:05:43Z)
                   Commit: 9f38af9a6fc0d38acfbd496199b495482266ba0cad3012410b539916001d36e6
             GPGSignature: Valid signature by ACB5EE4E831C74BB7C168D27F55AD3FB5323552A

@queeup
Copy link
Author

queeup commented Sep 23, 2022

Sorry , I forgot to tell that. I disable selinux through coreos-installer.

Also while I was trying to deduct my personal info I erased all my ignition file :) Please check again my first post for whole ignition I use.

This is my install script:

sudo podman run --pull=always \
                --privileged \
                --rm \
                -v /dev:/dev \
                -v /run/udev:/run/udev \
                -v .:/data -w /data  \
                quay.io/coreos/coreos-installer:release install /dev/sdb \
                    --insecure \
                    --offline \
                    --ignition-file ignition.ign \
                    --architecture aarch64 \
                    --append-karg selinux=0 \
                    --append-karg rd.driver.blacklist=vc4 \
                    --image-file fedora-coreos-37.20220918.1.1-metal.aarch64.raw.xz

@alexpdp7
Copy link

Sorry for the offtopic @queeup , but you say you got FCOS working on a RPI3? Can you share somewhere how are you doing it? Maybe here: https://discussion.fedoraproject.org/t/fcos-unusually-slow-on-raspberry-pi-3b/40635

@lucab
Copy link
Contributor

lucab commented Sep 26, 2022

This looks like a side-effect of selinux=0, you could try enforcing=0 instead. For a longer discussion about SELinux, see coreos/fedora-coreos-docs#439.

@travier
Copy link
Member

travier commented Sep 26, 2022

@queeup
Copy link
Author

queeup commented Sep 26, 2022

@lucab, you are right. enforcing=0 fixed the issue. If I use selinux=0 with coreos-installer, because of selinux disabled on first boot I guess permissions are not set properly.

I am going to close this issue.

[core@coreos ~]$ ls -lZ /etc/
drwxr-xr-x. 2 root root   ?              28 Sep 23 13:26 sysctl.d
[core@coreos etc]$ ls -lZ 
total 1084
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            5169 Sep 23 13:26 DIR_COLORS
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            5251 Sep 23 13:26 DIR_COLORS.lightbgcolor
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0              94 Sep 23 13:26 GREP_COLORS
drwxr-xr-x  7 root root   ?                                      134 Sep 23 13:26 NetworkManager
drwxr-xr-x  5 root root   ?                                       51 Sep 23 13:26 X11
-rw-r--r--. 1 root root   system_u:object_r:adjtime_t:s0          12 Sep 23 13:26 adjtime
-rw-r--r--. 1 root root   system_u:object_r:etc_aliases_t:s0    1529 Sep 23 13:26 aliases
drwxr-xr-x  2 root root   ?                                     4096 Sep 23 13:26 alternatives
drwxr-xr-x  3 root root   ?                                     4096 Sep 23 13:26 authselect
drwxr-xr-x  2 root root   ?                                       38 Sep 23 13:26 bash_completion.d
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            2638 Sep 23 13:26 bashrc
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0             535 Sep 23 13:26 bindresvport.blacklist
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 binfmt.d
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            1371 Sep 23 13:26 chrony.conf
-rw-r-----. 1 root chrony system_u:object_r:chronyd_keys_t:s0    540 Sep 23 13:26 chrony.keys
drwxr-xr-x  2 root root   ?                                       26 Sep 23 13:26 cifs-utils
drwxr-xr-x  2 root root   ?                                       25 Sep 23 13:26 containerd
drwxr-xr-x  6 root root   ?                                      139 Sep 23 13:26 containers
drwxr-xr-x  6 root root   ?                                       81 Sep 23 13:26 crypto-policies
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            1401 Sep 23 13:26 csh.cshrc
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            1087 Sep 23 13:26 csh.login
drwxr-xr-x  4 root root   ?                                       78 Sep 23 13:26 dbus-1
drwxr-xr-x  3 root root   ?                                       16 Sep 23 13:26 dconf
drwxr-xr-x. 2 root root   system_u:object_r:etc_t:s0              39 Sep 23 13:40 default
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 depmod.d
drwxr-xr-x  3 root root   ?                                       24 Sep 23 13:26 dhcp
drwxr-xr-x  3 root root   ?                                       25 Sep 23 13:26 dnf
-rw-r--r--. 1 root root   system_u:object_r:dnsmasq_etc_t:s0   27981 Sep 23 13:26 dnsmasq.conf
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 dnsmasq.d
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0             117 Sep 23 13:26 dracut.conf
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 dracut.conf.d
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0               0 Sep 23 13:26 environment
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            1362 Sep 23 13:26 ethertypes
-rw-r--r--. 1 root root   system_u:object_r:exports_t:s0           0 Sep 23 13:26 exports
lrwxrwxrwx  1 root root   ?                                       25 Sep 23 13:26 fedora-release -> ../usr/lib/fedora-release
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0              66 Sep 23 13:26 filesystems
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0              38 Sep 23 13:26 fuse.conf
drwxr-xr-x  4 root root   ?                                      134 Sep 23 13:26 fwupd
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 gcrypt
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 gnupg
-rw-r--r--. 1 root root   system_u:object_r:passwd_file_t:s0     112 Aug 19 03:00 group
-rw-r--r--. 1 root root   system_u:object_r:passwd_file_t:s0      79 Sep 22 01:41 group-
drwx------  2 root root   ?                                     4096 Sep 23 13:26 grub.d
lrwxrwxrwx  1 root root   ?                                       22 Sep 23 13:26 grub2-efi.cfg -> ../boot/grub2/grub.cfg
lrwxrwxrwx  1 root root   ?                                       22 Sep 23 13:26 grub2.cfg -> ../boot/grub2/grub.cfg
-r--------. 1 root root   system_u:object_r:shadow_t:s0          412 Aug 19 03:00 gshadow
-r--------. 1 root root   system_u:object_r:shadow_t:s0          391 Sep 22 01:41 gshadow-
drwxr-xr-x  3 root root   ?                                       20 Sep 23 13:26 gss
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0               9 Sep 23 13:26 host.conf
-rw-r--r--. 1 root root   system_u:object_r:hostname_etc_t:s0     10 Aug 19 03:00 hostname
-rw-r--r--. 1 root root   system_u:object_r:net_conf_t:s0        386 Sep 23 13:26 hosts
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            5799 Sep 23 13:26 idmapd.conf
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0             490 Sep 23 13:26 inittab
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0             943 Sep 23 13:26 inputrc
drwxr-xr-x  2 root root   ?                                      159 Sep 23 13:26 iproute2
drwxr-xr-x  2 root root   ?                                       25 Sep 23 13:26 iscsi
lrwxrwxrwx  1 root root   ?                                       16 Sep 23 13:26 issue -> ../usr/lib/issue
drwxr-xr-x. 2 root root   system_u:object_r:etc_t:s0             148 Aug 19 03:00 issue.d
lrwxrwxrwx  1 root root   ?                                       20 Sep 23 13:26 issue.net -> ../usr/lib/issue.net
drwxr-xr-x  4 root root   ?                                       33 Sep 23 13:26 kdump
-rw-r--r--. 1 root root   system_u:object_r:kdump_etc_t:s0      8892 Sep 23 13:26 kdump.conf
drwxr-xr-x  3 root root   ?                                       23 Sep 23 13:26 kernel
-rw-r--r--. 1 root root   system_u:object_r:krb5_conf_t:s0       880 Sep 23 13:26 krb5.conf
drwxr-xr-x  2 root root   ?                                       57 Sep 23 13:26 krb5.conf.d
-rw-r--r--  1 root root   ?                                    15887 Aug 19 03:00 ld.so.cache
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0              28 Sep 23 13:26 ld.so.conf
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 ld.so.conf.d
-rw-r-----. 1 root root   system_u:object_r:etc_t:s0             191 Sep 23 13:26 libaudit.conf
drwxr-xr-x  2 root root   ?                                     4096 Sep 23 13:26 libibverbs.d
drwxr-xr-x  2 root root   ?                                       35 Sep 23 13:26 libnl
drwxr-xr-x  6 root root   ?                                       70 Sep 23 13:26 libreport
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            2393 Sep 23 13:26 libuser.conf
-rw-r--r--  1 root root   ?                                       81 Jan  1  1970 locale.conf
lrwxrwxrwx. 1 root root   system_u:object_r:locale_t:s0           37 Sep 23 13:40 localtime -> ../usr/share/zoneinfo/Europe/Istanbul
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            8676 Sep 23 13:26 login.defs
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0             493 Sep 23 13:26 logrotate.conf
drwxr-xr-x  2 root root   ?                                       88 Sep 23 13:26 logrotate.d
drwxr-xr-x  6 root root   ?                                      100 Sep 23 13:26 lvm
-r--r--r--  1 root root   ?                                       33 Aug 19 03:01 machine-id
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0             111 Sep 23 13:26 magic
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            5122 Sep 23 13:26 makedumpfile.conf.sample
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0             782 Sep 23 13:26 mke2fs.conf
drwxr-xr-x  2 root root   ?                                       36 Sep 23 13:26 modprobe.d
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 modules-load.d
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0               0 Sep 23 13:26 motd
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 motd.d
lrwxrwxrwx  1 root root   ?                                       19 Sep 23 13:26 mtab -> ../proc/self/mounts
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 multipath
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0           11397 Sep 23 13:26 nanorc
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0             767 Sep 23 13:26 netconfig
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0              58 Sep 23 13:26 networks
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            1468 Sep 23 13:26 nfs.conf
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            3604 Sep 23 13:26 nfsmount.conf
drwx------  3 root root   ?                                       66 Sep 23 13:26 nftables
lrwxrwxrwx  1 root root   ?                                       29 Sep 23 13:26 nsswitch.conf -> /etc/authselect/nsswitch.conf
drwxr-xr-x  2 root root   ?                                       28 Sep 23 13:26 nvme
drwxr-xr-x  3 root root   ?                                       36 Sep 23 13:26 openldap
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 opt
lrwxrwxrwx  1 root root   ?                                       21 Sep 23 13:26 os-release -> ../usr/lib/os-release
drwxr-xr-x  3 root root   ?                                       23 Sep 23 13:26 ostree
drwxr-xr-x  2 root root   ?                                     4096 Sep 23 13:26 pam.d
-rw-r--r--. 1 root root   system_u:object_r:passwd_file_t:s0      93 Aug 19 03:00 passwd
-rw-r--r--. 1 root root   system_u:object_r:passwd_file_t:s0      93 Aug 19 03:00 passwd-
drwxr-xr-x  3 root root   ?                                       21 Sep 23 13:26 pkcs11
drwxr-xr-x  3 root root   ?                                       27 Sep 23 13:26 pkgconfig
drwxr-xr-x  8 root root   ?                                       95 Sep 23 13:26 pki
drwxr-xr-x  5 root root   ?                                       52 Sep 23 13:26 pm
drwxr-xr-x  5 root root   ?                                       72 Sep 23 13:26 polkit-1
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 popt.d
-rw-r--r--. 1 root root   system_u:object_r:cupsd_rw_etc_t:s0    233 Sep 23 13:26 printcap
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            1945 Sep 23 13:26 profile
drwxr-xr-x  2 root root   ?                                     4096 Sep 23 13:26 profile.d
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            6568 Sep 23 13:26 protocols
drwxr-xr-x  3 root root   ?                                       20 Sep 23 13:26 rc.d
lrwxrwxrwx  1 root root   ?                                       14 Sep 23 13:26 redhat-release -> fedora-release
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            1787 Sep 23 13:26 request-key.conf
drwxr-xr-x  2 root root   ?                                       77 Sep 23 13:26 request-key.d
lrwxrwxrwx  1 root root   ?                                       39 Sep 23 13:26 resolv.conf -> ../run/systemd/resolve/stub-resolv.conf
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            1634 Sep 23 13:26 rpc
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 rpm
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0             443 Sep 23 13:26 rpm-ostreed.conf
-rw-r--r--. 1 root root   system_u:object_r:rsync_etc_t:s0       458 Sep 23 13:26 rsyncd.conf
drwxr-xr-x  2 root root   ?                                       35 Sep 23 13:26 rwtab.d
drwxr-xr-x  2 root root   ?                                       61 Sep 23 13:26 samba
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 sasl2
drwxr-xr-x  7 root root   ?                                     4096 Sep 23 13:26 security
drwxr-xr-x  4 root root   ?                                       70 Sep 23 13:26 selinux
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0          701745 Sep 23 13:26 services
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0             216 Sep 23 13:26 sestatus.conf
-r--------. 1 root root   system_u:object_r:shadow_t:s0          495 Aug 19 03:00 shadow
-r--------. 1 root root   system_u:object_r:shadow_t:s0          495 Aug 19 03:00 shadow-
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0              44 Sep 23 13:26 shells
drwxr-xr-x  2 root root   ?                                       62 Sep 23 13:26 skel
drwxr-xr-x. 4 root root   system_u:object_r:etc_t:s0            4096 Sep 23 13:40 ssh
drwxr-xr-x  2 root root   ?                                       91 Sep 23 13:26 ssl
drwx------  4 root root   ?                                       31 Sep 23 13:26 sssd
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 statetab.d
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0              18 Aug 19 03:00 subgid
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0               0 Sep 22 01:41 subgid-
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0              18 Aug 19 03:00 subuid
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0               0 Sep 22 01:41 subuid-
-rw-r-----. 1 root root   system_u:object_r:etc_t:s0            4573 Sep 23 13:26 sudo.conf
-r--r-----. 1 root root   system_u:object_r:etc_t:s0            4375 Sep 23 13:26 sudoers
drwxr-x---  2 root root   ?                                       31 Sep 23 13:26 sudoers.d
drwxr-xr-x  3 root root   ?                                       24 Sep 23 13:26 swid
drwxr-xr-x  3 root root   ?                                     4096 Sep 23 13:26 sysconfig
-rw-r--r--. 1 root root   system_u:object_r:system_conf_t:s0     449 Sep 23 13:26 sysctl.conf
drwxr-xr-x. 2 root root   system_u:object_r:etc_t:s0              28 Sep 23 13:26 sysctl.d
lrwxrwxrwx  1 root root   ?                                       14 Sep 23 13:26 system-release -> fedora-release
lrwxrwxrwx  1 root root   ?                                       29 Sep 23 13:26 system-release-cpe -> ../usr/lib/system-release-cpe
drwxr-xr-x. 6 root root   system_u:object_r:etc_t:s0            4096 Sep 23 13:40 systemd
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 terminfo
drwxr-xr-x  2 root root   ?                                        6 Sep 23 13:26 tmpfiles.d
drwxr-xr-x  3 root root   ?                                       51 Sep 23 13:26 tpm2-tss
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0             375 Sep 23 13:26 trusted-key.key
drwxr-xr-x  4 root root   ?                                       68 Aug 19 03:00 udev
-rw-r--r--. 1 root root   system_u:object_r:locale_t:s0            9 Aug 19 03:00 vconsole.conf
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0            1183 Sep 23 13:26 virc
drwx------  2 root root   ?                                        6 Sep 23 13:26 wireguard
-rw-r--r--. 1 root root   system_u:object_r:etc_t:s0             817 Sep 23 13:26 xattr.conf
drwxr-xr-x  4 root root   ?                                       38 Sep 23 13:26 xdg
drwxr-xr-x. 2 root root   system_u:object_r:system_conf_t:s0    4096 Sep 23 13:40 yum.repos.d
drwxr-xr-x  3 root root   ?                                       22 Sep 23 13:26 zincati

@queeup queeup closed this as completed Sep 26, 2022
@dustymabe dustymabe changed the title coreos-printk-quiet.service always fails after first boot. coreos-printk-quiet.service always fails after first boot when selinux=0 Sep 26, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

5 participants