Re: Is SELinux enforcing on the koji builders?

2019-03-27 Thread Kevin Fenzi
On 3/27/19 8:04 AM, Lubomír Sedlář wrote: > Jerry James píše v St 27. 03. 2019 v 08:17 -0600: >> On Wed, Mar 27, 2019 at 1:17 AM Miroslav Suchý >> wrote: >>> Hmmm, it would be nice if we can send ABRT reports from crashes, >>> which happens during a build. >> >> Or a button I can push somewhere

Re: Is SELinux enforcing on the koji builders?

2019-03-27 Thread Lubomír Sedlář
Jerry James píše v St 27. 03. 2019 v 08:17 -0600: > On Wed, Mar 27, 2019 at 1:17 AM Miroslav Suchý > wrote: > > Hmmm, it would be nice if we can send ABRT reports from crashes, > > which happens during a build. > > Or a button I can push somewhere that downloads the contents of >

Re: Is SELinux enforcing on the koji builders?

2019-03-27 Thread Jerry James
On Wed, Mar 27, 2019 at 1:17 AM Miroslav Suchý wrote: > Hmmm, it would be nice if we can send ABRT reports from crashes, which > happens during a build. Or a button I can push somewhere that downloads the contents of /builddir/build/BUILD as a tarball, for a given architecture, after a failed

Re: Is SELinux enforcing on the koji builders?

2019-03-27 Thread Miroslav Suchý
Dne 27. 03. 19 v 4:33 Jerry James napsal(a): > Thanks for confirming. I am really puzzled. I can consistently get > good builds in mock, across all arches I am able to test, and > consistently get segfaults on every single arch when building in koji. > I'm going to have to do the trick of

Re: Is SELinux enforcing on the koji builders?

2019-03-26 Thread Jerry James
On Sun, Mar 24, 2019 at 9:26 PM Kevin Fenzi wrote: > Nope. All builders are in permissive mode. Thanks for confirming. I am really puzzled. I can consistently get good builds in mock, across all arches I am able to test, and consistently get segfaults on every single arch when building in

Re: Is SELinux enforcing on the koji builders?

2019-03-25 Thread Miroslav Suchý
Dne 25. 03. 19 v 4:26 John M. Harris, Jr. napsal(a): > What is the reason for builders running permissive, rather than with a > tailored targeted policy? Technical details from Mock POV: When Mock install the chroot using: dnf --installroot=/var/lib/mock/fedora-29-x86_64-bootstrap/root/

Re: Is SELinux enforcing on the koji builders?

2019-03-24 Thread Kevin Fenzi
On 3/24/19 8:26 PM, John M. Harris, Jr. wrote: > What is the reason for builders running permissive, rather than with a > tailored targeted policy? Running enforcing caused odd building issues (like the one mentioned in this thread) and it's never been been a priority to spend time to track them

Re: Is SELinux enforcing on the koji builders?

2019-03-24 Thread John M. Harris, Jr.
What is the reason for builders running permissive, rather than with a tailored targeted policy? On March 24, 2019 11:25:14 PM EDT, Kevin Fenzi wrote: >On 3/24/19 6:57 PM, Jerry James wrote: >> I ask because the gcl build is failing on every architecture. The >gcl >> binary segfaults

Re: Is SELinux enforcing on the koji builders?

2019-03-24 Thread Kevin Fenzi
On 3/24/19 6:57 PM, Jerry James wrote: > I ask because the gcl build is failing on every architecture. The gcl > binary segfaults immediately after it is linked in the first stage, > which is what happens if I try to build in mock on my local machine > with SELinux in enforcing mode. But if I

Is SELinux enforcing on the koji builders?

2019-03-24 Thread Jerry James
I ask because the gcl build is failing on every architecture. The gcl binary segfaults immediately after it is linked in the first stage, which is what happens if I try to build in mock on my local machine with SELinux in enforcing mode. But if I put SELinux into permissive mode, I can build