-
Notifications
You must be signed in to change notification settings - Fork 21
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Not compatible with Amazon Linux 2023 #71
Comments
[root@ip-10-0-1-10 ~]# semodule -vv -i /usr/share/selinux/packages/k3s.pp |
I don't have a arm64 system to test this on, but... For x86_64, K3s on AL 2023 automatically installs the correct selinux module.
|
Hi,
The correct module is also installed on ARM64. However, the module will not load. I've switched to Centos9 and everythings is working perfectly. I can't find the .pp files for the amazon distro to debug; Like so;
pp abrt.pp > abrt.txt
Regards,
Martin.
…________________________________
From: Derek Nola ***@***.***>
Sent: Wednesday, October 30, 2024 7:27 PM
To: k3s-io/k3s-selinux ***@***.***>
Cc: Martin Sarrionandia ***@***.***>; Author ***@***.***>
Subject: Re: [k3s-io/k3s-selinux] Not compatible with Amazon Linux 2023 (Issue #71)
I don't have a arm64 system to test this on, but...
For x86_64, K3s on AL 2023 automatically installs the correct selinux module.
install-al-23: [INFO] Installing k3s to /usr/local/bin/k3s
install-al-23: [INFO] Finding available k3s-selinux versions
install-al-23: Rancher K3s Common (testing) 11 kB/s | 5.0 kB 00:00
install-al-23: Dependencies resolved.
install-al-23: ================================================================================
install-al-23: Package Arch Version Repository Size
install-al-23: ================================================================================
install-al-23: Installing:
install-al-23: k3s-selinux noarch 1.6-5.el8 rancher-k3s-common-testing 20 k
install-al-23: Installing dependencies:
install-al-23: container-selinux
install-al-23: noarch 2:2.222.0-325.amzn2023 amazonlinux 55 k
install-al-23:
install-al-23: Transaction Summary
install-al-23: ================================================================================
install-al-23: Install 2 Packages
install-al-23:
install-al-23: Total download size: 76 k
install-al-23: Installed size: 161 k
install-al-23: Downloading Packages:
install-al-23: (1/2): container-selinux-2.222.0-325.amzn2023.n 239 kB/s | 55 kB 00:00
install-al-23: (2/2): k3s-selinux-1.6-5.el8.noarch.rpm 82 kB/s | 20 kB 00:00
install-al-23: --------------------------------------------------------------------------------
***@***.*** vagrant]# semodule -vv -i /usr/share/selinux/packages/k3s.pp
...
...
Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/100/xserver/cil:5845
Disabling optional 'xserver_optional_125' at /var/lib/selinux/targeted/tmp/modules/100/xserver/cil:5843
Resetting declarations
Qualifying Names
Compile post process
Building policy binary
Ok: transaction number 7.
***@***.*** vagrant]# semodule --list | grep k3s
k3s
***@***.*** vagrant]# uname -a
Linux smoke 6.1.82-99.168.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Mar 25 17:11:31 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
—
Reply to this email directly, view it on GitHub<#71 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AKANJFNVIBVJLBFQFIPTFQDZ6EXIRAVCNFSM6AAAAABQ2PI6HWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINBYGE3TCMJUGQ>.
You are receiving this because you authored the thread.Message ID: ***@***.***>
|
[root@ip-10-0-1-10 packages]# semodule -i k3s.pp
Failed to resolve typeattributeset statement at /var/lib/selinux/targeted/tmp/modules/400/k3s/cil:21
Failed to resolve AST
semodule: Failed!
uname -a
Linux ip-10-0-1-10.eu-west-2.compute.internal 6.1.112-122.189.amzn2023.aarch64 #1 SMP Tue Oct 8 17:01:34 UTC 2024 aarch64 aarch64 aarch64 GNU/Linux
The text was updated successfully, but these errors were encountered: