Comment 102 for bug 1768230

Revision history for this message
Tomasz Konefal (twkonefal-j) wrote :

I get this error on a new minimal VM install with all LVM disks except '/boot':

--
root@img-ults18:/var/log# lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
loop0 7:0 0 89.1M 1 loop /snap/core/8268
loop1 7:1 0 88.5M 1 loop /snap/core/7270
sda 8:0 0 1G 0 disk
├─sda1 8:1 0 1M 0 part
└─sda2 8:2 0 1021M 0 part /boot
sdb 8:16 0 32G 0 disk
├─VGroot-LVroot 253:0 0 7G 0 lvm /
├─VGroot-LVtmp 253:1 0 3G 0 lvm /tmp
├─VGroot-LVvar 253:2 0 4G 0 lvm /var
├─VGroot-LVvartmp 253:3 0 3G 0 lvm /var/tmp
├─VGroot-VGlog 253:4 0 4G 0 lvm /var/log
├─VGroot-LVaudit 253:5 0 2G 0 lvm /var/log/audit
├─VGroot-LVswap 253:6 0 4G 0 lvm [SWAP]
└─VGroot-LVhome 253:7 0 5G 0 lvm /home
sr0 11:0 1 1024M 0 rom

root@img-ults18:/var/log# pvs
  PV VG Fmt Attr PSize PFree
  /dev/sdb VGroot lvm2 a-- <32.00g 0

root@img-ults18:/var/log# vgs
  VG #PV #LV #SN Attr VSize VFree
  VGroot 1 8 0 wz--n- <32.00g 0

root@img-ults18:/var/log# lvs -a
  LV VG Attr LSize Pool Origin Data% Meta% Move Log Cpy%Sync Convert
  LVaudit VGroot -wi-ao---- 2.00g
  LVhome VGroot -wi-ao---- <5.00g
  LVroot VGroot -wi-ao---- 7.00g
  LVswap VGroot -wi-ao---- 4.00g
  LVtmp VGroot -wi-ao---- 3.00g
  LVvar VGroot -wi-ao---- 4.00g
  LVvartmp VGroot -wi-ao---- 3.00g
  VGlog VGroot -wi-ao---- 4.00g

--
...
0 packages can be updated.
0 updates are security updates.

No mail.
Last login: Thu Jan 9 21:09:04 2020 from 137.82.124.99
root@img-ults18:~#
root@img-ults18:~# apt-get install selinux
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  policycoreutils selinux-policy-dummy selinux-utils
The following packages will be REMOVED:
  apparmor snapd
The following NEW packages will be installed:
  policycoreutils selinux selinux-policy-dummy selinux-utils
0 upgraded, 4 newly installed, 2 to remove and 0 not upgraded.
Need to get 544 kB of archives.
After this operation, 62.7 MB disk space will be freed.
Do you want to continue? [Y/n]
Get:1 http://mirror.it.ubc.ca/ubuntu bionic/universe amd64 selinux-utils amd64 2.7-2build2 [81.7 kB]
Get:2 http://mirror.it.ubc.ca/ubuntu bionic/universe amd64 policycoreutils amd64 2.7-1 [450 kB]
Get:3 http://mirror.it.ubc.ca/ubuntu bionic/universe amd64 selinux all 1:0.11 [11.2 kB]
Get:4 http://mirror.it.ubc.ca/ubuntu bionic/universe amd64 selinux-policy-dummy all 0.1 [1,730 B]
Fetched 544 kB in 0s (7,670 kB/s)
Preconfiguring packages ...

...

(Reading database ... 102901 files and directories currently installed.)
Removing snapd (2.42.1+18.04) ...
Removing apparmor (2.12-4ubuntu5.1) ...
Selecting previously unselected package selinux-utils.
(Reading database ... 102812 files and directories currently installed.)
Preparing to unpack .../selinux-utils_2.7-2build2_amd64.deb ...
Unpacking selinux-utils (2.7-2build2) ...
Selecting previously unselected package policycoreutils.
Preparing to unpack .../policycoreutils_2.7-1_amd64.deb ...
Unpacking policycoreutils (2.7-1) ...
Selecting previously unselected package selinux.
Preparing to unpack .../selinux_1%3a0.11_all.deb ...
Unpacking selinux (1:0.11) ...
Selecting previously unselected package selinux-policy-dummy.
Preparing to unpack .../selinux-policy-dummy_0.1_all.deb ...
Unpacking selinux-policy-dummy (0.1) ...
Setting up selinux-utils (2.7-2build2) ...
Setting up selinux-policy-dummy (0.1) ...
Setting up policycoreutils (2.7-1) ...
selinux-autorelabel-mark.service is a disabled or a static unit, not starting it.
Setting up selinux (1:0.11) ...
Sourcing file `/etc/default/grub'
Generating grub configuration file ...
File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2167: /usr/sbin/grub-probe
File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2167: /usr/sbin/grub-probe
File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2172: /usr/sbin/grub-probe
File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2172: /usr/sbin/grub-probe
File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2177: /usr/sbin/grub-probe
File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2177: /usr/sbin/grub-probe
File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2182: /usr/sbin/grub-probe
File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2182: /usr/sbin/grub-probe
File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2218: /usr/sbin/grub-probe
File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2218: /usr/sbin/grub-probe
Found linux image: /boot/vmlinuz-4.15.0-74-generic
Found initrd image: /boot/initrd.img-4.15.0-74-generic
Found linux image: /boot/vmlinuz-4.15.0-72-generic
Found initrd image: /boot/initrd.img-4.15.0-72-generic
File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2545: /usr/sbin/grub-probe
File descriptor 3 (pipe:[34729]) leaked on vgs invocation. Parent PID 2545: /usr/sbin/grub-probe
File descriptor 3 (pipe:[34729]) leaked on lvs invocation. Parent PID 2665: /bin/sh
done
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
Processing triggers for ureadahead (0.100.0-21) ...
Processing triggers for systemd (237-3ubuntu10.33) ...
Processing triggers for man-db (2.8.3-2ubuntu0.1) ...
Processing triggers for mime-support (3.60ubuntu1) ...
Processing triggers for initramfs-tools (0.130ubuntu3.9) ...
update-initramfs: Generating /boot/initrd.img-4.15.0-74-generic
I: The initramfs will attempt to resume from /dev/dm-6
I: (/dev/mapper/VGroot-LVswap)
I: Set the RESUME variable to override this.

--

The system doesn't boot after this:

--
Being: Running /scripts/init-bottom ... mkdir: can't create directory '/root/selinux': Read-only file system
done.
audit: type=1404 audit(1578604588.526:2): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295
SELinux: Could not open policy file <= /etc/selinux/default/policy/policy.31: No such file or directory
systemd[1]: Failed to load SELinux policy.
[!!!!!!] Failed to load SELinux policy, freezing.
systemd[1]: Freezing execution.

--

After changing the resume policy to 'none' and updating initramfs, the system will boot, but with a long delay. There are also now very long delays to ssh logins.

I've attached the syslog from the boot.