On pondělí 11. srpna 2025 0:08:23, středoevropský standardní čas Orion
Poplawski wrote:
> I use centos stream 9 for my primary laptop. I'm trying to build some
> Fedora Rawhide packages in mock. When rpm is trying to uncompress xz
> tar balls I get:
>
> + /usr/lib/rpm/rpmuncompress -x
> /builddir/build/SOURCES/gdal-3.11.3-fedora.tar.xz
> /usr/bin/xz: Failed to enable the sandbox
>
> Any clue as to what is causing this? I'm not seeing any obvious SELinux
> errors.
I was pointed to this e-mail today. This seems like the EL9 kernel is just too
old to run `xz` built for rawhide.
<mock-rawhide-shell-on-el9-box> $ strace xz -d gdal-3.11.4-fedora.tar.xz
prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0) = 0
landlock_create_ruleset(NULL, 0, LANDLOCK_CREATE_RULESET_VERSION) = 6
landlock_create_ruleset({handled_access_fs=LANDLOCK_ACCESS_FS_EXECUTE|LANDLOCK_ACCESS_FS_REMOVE_DIR|LANDLOCK_ACCESS_FS_MAKE_CHAR|LANDLOCK_ACCESS_FS_MAKE_DIR|LANDLOCK_ACCESS_FS_MAKE_SOCK|LANDLOCK_ACCESS_FS_MAKE_FIFO|LANDLOCK_ACCESS_FS_MAKE_BLOCK|LANDLOCK_ACCESS_FS_MAKE_SYM|LANDLOCK_ACCESS_FS_REFER|LANDLOCK_ACCESS_FS_TRUNCATE|LANDLOCK_ACCESS_FS_IOCTL_DEV,
handled_access_net=LANDLOCK_ACCESS_NET_BIND_TCP|LANDLOCK_ACCESS_NET_CONNECT_TCP,
scoped=LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET|LANDLOCK_SCOPE_SIGNAL}, 24, 0) = -1
EINVAL (Invalid argument)
...
Pavel
>
>
> --
> Orion Poplawski
> he/him/his - surely the least important thing about me
> IT Systems Manager 720-772-5637
> NWRA, Boulder/CoRA Office FAX: 303-415-9702
> 3380 Mitchell Lane [email protected]
> Boulder, CO 80301 https://www.nwra.com/
--
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
