particle-os/debian-forge
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Mockbuild: workaround a SELinux policy issue on c10s.

Browse source 
SELinux policy forbids systemd-machined from creating a varlink socket,
which it does since v256. This makes it fail to start. Subsequently,
mock fails to build the RPM, because it uses systemd-nspawn as an
isolation and it fails to register the machine with systemd-machined.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
This commit is contained in:
Tomáš Hozza 2024-07-18 21:35:31 +02:00 • committed by Tomáš Hozza
parent dcc08d8bd4
commit df83c62920
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
schutzbot/mockbuild.sh
View file

@ -135,6 +135,14 @@ if [[ ($ID == rhel || $ID == centos) && ${VERSION_ID%.*} == 10 ]]; then
sudo dnf copr enable -y @osbuild/centpkg "centos-stream-10-$(uname -m)" sudo dnf copr enable -y @osbuild/centpkg "centos-stream-10-$(uname -m)"
fi fi
# TODO: Remove this workaround, once https://issues.redhat.com/browse/RHEL-49567 is fixed
# We can't workaround this in mock config due to https://github.com/rpm-software-management/mock/pull/1410
if [[ $ID == centos && ${VERSION_ID%.*} == 10 ]]; then
sudo setenforce 0
sudo systemctl restart systemd-machined.service
sudo setenforce 1
fi
# Install requirements for building RPMs in mock. # Install requirements for building RPMs in mock.
greenprint "📦 Installing mock requirements" greenprint "📦 Installing mock requirements"
dnf_install_with_retry createrepo_c make mock python3-pip rpm-build s3cmd dnf_install_with_retry createrepo_c make mock python3-pip rpm-build s3cmd