| View previous topic :: View next topic |
| Author |
Message |
inf1nity
n00b
Joined: 05 Apr 2015
Posts: 15
|
 Posted: Fri May 26, 2023 1:42 pm Post subject: SELinux MCS and Dracut |
 |
|
Hi,
I'm new to SELinux and want to build a VM server with libvirt. For that I chose the SELinux type mcs and followed the guides.
This is my current state:
| Code: |
# sestatus
SELinux status: enabled
SELinuxfs mount: /sys/fs/selinux
SELinux root directory: /etc/selinux
Loaded policy name: mcs
Current mode: enforcing
Mode from config file: enforcing
Policy MLS status: enabled
Policy deny_unknown status: allowed
Memory protection checking: actual (secure)
Max kernel policy version: 33
# systemctl --failed
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
|
Everything boots fine, most is running without any deny problems.
I followed the relabel guide for changing the SELinux type, because initially it was targeted. That means changing the modules via | Code: | | semodule -b base.pp -i $(ls *.pp | grep -v base.pp) |
and running setfiles afterwards.
My problem is, that since I set it to enforcing mode, I can't build my initramfs with dracut anymore.
The SELinux dracut module is installed and loaded:
| Code: |
# semodule -l | grep dracut
dracut
|
This is my login procedure:
| Code: |
# SSH from the outside
user $ newrole -r sysadm_r
user $ su -
root # id
uid=0(root) gid=0(root) groups=0(root) context=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023
|
I also tested running the dracut command with sudo, where I added the following via visudo:
| Code: |
user ALL=(ALL:ALL) TYPE=sysadm_t ROLE=sysadm_r PASSWD: ALL
|
The results are the same. Here are the errors I see (I filtered out lots of | Code: | | cp: setting attribute 'security.selinux' for 'security.selinux': Permission denied |
lines):
| Code: |
# dracut -f --kver 5.15.112-debug |& grep -v 'security.selinux'
/usr/lib/dracut/dracut-functions.sh: /usr/bin/gcc-config: /usr/bin/env: bad interpreter: Permission denied
dracut-install: ERROR: installing '/bin/sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /bin/sh
dracut: Executing: /usr/bin/dracut -f --kver 5.15.112-debug
dracut: dracut module 'dash' will not be installed, because command 'dash' could not be found!
dracut: dracut module 'mksh' will not be installed, because command 'mksh' could not be found!
mktemp: failed to create file via template '/tmp/tmp.XXXXXXXXXX': Permission denied
/usr/lib/dracut/modules.d/02zfsexpandknowledge/module-setup.sh: line 20: : No such file or directory
cat: '': No such file or directory
dracut: zfsexpandknowledge: pool zroot cannot be listed:
mktemp: failed to create file via template '/tmp/tmp.XXXXXXXXXX': Permission denied
/usr/lib/dracut/modules.d/02zfsexpandknowledge/module-setup.sh: line 20: : No such file or directory
cat: '': No such file or directory
dracut: zfsexpandknowledge: pool zboot cannot be listed:
dracut: dracut module 'busybox' will not be installed, because command 'busybox' could not be found!
dracut: dracut module 'dbus-broker' will not be installed, because command 'dbus-broker' could not be found!
dracut: dracut module 'connman' will not be installed, because command 'connmand' could not be found!
dracut: dracut module 'connman' will not be installed, because command 'connmanctl' could not be found!
dracut: dracut module 'connman' will not be installed, because command 'connmand-wait-online' could not be found!
dracut: dracut module 'network-wicked' will not be installed, because command 'wicked' could not be found!
dracut: 62bluetooth: Could not find any command of '/usr/lib/bluetooth/bluetoothd /usr/libexec/bluetooth/bluetoothd'!
dracut: dracut module 'btrfs' will not be installed, because command 'btrfs' could not be found!
dracut: dracut module 'dmraid' will not be installed, because command 'dmraid' could not be found!
dracut: dracut module 'mdraid' will not be installed, because command 'mdadm' could not be found!
dracut: dracut module 'tpm2-tss' will not be installed, because command 'tpm2' could not be found!
dracut: dracut module 'biosdevname' will not be installed, because command 'biosdevname' could not be found!
dracut: dracut module 'memstrack' will not be installed, because command 'memstrack' could not be found!
dracut: memstrack is not available
dracut: If you need to use rd.memdebug>=4, please install memstrack and procps-ng
dracut: *** Including module: bash ***
dracut-install: ERROR: failed to install '/lib64/libreadline.so.8' for '/bin/bash'
dracut-install: ERROR: failed to install '/lib64/libtinfo.so.6' for '/bin/bash'
dracut-install: ERROR: failed to install '/lib64/libc.so.6' for '/bin/bash'
dracut-install: ERROR: failed to install '/lib64/libtinfow.so.6' for '/bin/bash'
dracut-install: ERROR: failed to install '/lib64/ld-linux-x86-64.so.2' for '/bin/bash'
dracut-install: ERROR: installing '/bin/bash'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /bin/bash
dracut: *** Including module: systemd ***
dracut-install: ERROR: failed to install '/usr/lib64/systemd/libsystemd-core-253.so' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/usr/lib64/systemd/libsystemd-shared-253.so' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/usr/lib64/libseccomp.so.2' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/libpam.so.0' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/libaudit.so.1' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/libkmod.so.2' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/libselinux.so.1' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/libmount.so.1' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/libacl.so.1' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/libblkid.so.1' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/libcap.so.2' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/usr/lib64/libcrypt.so.2' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/usr/lib64/libgcrypt.so.20' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/usr/lib64/liblz4.so.1' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/usr/lib64/libcrypto.so.1.1' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/liblzma.so.5' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/libzstd.so.1' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/libm.so.6' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/usr/lib64/libcap-ng.so.0' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/libz.so.1' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/lib64/libpcre2-8.so.0' for '/lib/systemd/systemd'
dracut-install: ERROR: failed to install '/usr/lib64/libgpg-error.so.0' for '/lib/systemd/systemd'
dracut-install: ERROR: installing 'nologin'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l nologin
dracut-install: ERROR: installing 'true'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l true
dracut-install: ERROR: installing '/lib/udev/rules.d/70-uaccess.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/70-uaccess.rules
dracut-install: ERROR: installing '/lib/udev/rules.d/71-seat.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/71-seat.rules
dracut-install: ERROR: installing '/lib/udev/rules.d/73-seat-late.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/73-seat-late.rules
dracut-install: ERROR: installing '/lib/udev/rules.d/90-vconsole.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/90-vconsole.rules
dracut-install: ERROR: installing '/lib/udev/rules.d/99-systemd.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/99-systemd.rules
Failed to set default unit, unit multi-user.target does not exist.
dracut-install: ERROR: installing '/lib64/libnss_compat.so.2'
dracut-install: ERROR: installing '/lib64/libnss_db.so.2'
dracut-install: ERROR: installing '/lib64/libnss_dns.so.2'
dracut-install: ERROR: installing '/lib64/libnss_files.so.2'
dracut-install: ERROR: failed to install '/lib64/libresolv.so.2' for '/lib64/libnss_hesiod.so.2'
dracut-install: ERROR: installing '/lib64/libnss_hesiod.so.2'
dracut-install: ERROR: failed to install '/usr/lib64/libyajl.so.2' for '/usr/lib64/libnss_libvirt.so.2'
dracut-install: ERROR: installing '/usr/lib64/libnss_libvirt.so.2'
dracut-install: ERROR: installing '/usr/lib64/libnss_libvirt_guest.so.2'
dracut-install: ERROR: installing '/usr/lib64/libnss_myhostname.so.2'
dracut-install: ERROR: installing '/usr/lib64/libnss_mymachines.so.2'
dracut-install: ERROR: installing '/usr/lib64/libnss_resolve.so.2'
dracut-install: ERROR: installing '/usr/lib64/libnss_sss.so.2'
dracut-install: ERROR: installing '/usr/lib64/libnss_systemd.so.2'
dracut-install: ERROR: failed to install '/usr/lib64/libbsd.so.0' for '/usr/lib64/libnss_winbind.so.2'
dracut-install: ERROR: failed to install '/usr/lib64/libmd.so.0' for '/usr/lib64/libnss_winbind.so.2'
dracut-install: ERROR: installing '/usr/lib64/libnss_winbind.so.2'
dracut-install: ERROR: installing '/usr/lib64/libnss_wins.so.2'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /lib64/libnss_compat.so.2 /lib64/libnss_db.so.2 /lib64/libnss_dns.so.2 /lib64/libnss_files.so.2 /lib64/libnss_hesiod.so.2 /usr/lib64/libnss_compat.so /usr/lib64/libnss_db.so /usr/lib64/libnss_hesiod.so /usr/lib64/libnss_libvirt.so.2 /usr/lib64/libnss_libvirt_guest.so.2 /usr/lib64/libnss_myhostname.so.2 /usr/lib64/libnss_mymachines.so.2 /usr/lib64/libnss_resolve.so.2 /usr/lib64/libnss_sss.so.2 /usr/lib64/libnss_systemd.so.2 /usr/lib64/libnss_winbind.so.2 /usr/lib64/libnss_wins.so.2
dracut: *** Including module: systemd-initrd ***
Failed to set default unit, unit initrd.target does not exist.
dracut: *** Including module: rngd ***
dracut-install: ERROR: failed to install '/usr/lib64/libp11.so.3' for '/usr/sbin/rngd'
dracut-install: ERROR: installing 'rngd'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l rngd
dracut-install: ERROR: failed to install '/usr/lib64/libopensc.so.8' for '/usr/lib64/opensc-pkcs11.so'
dracut-install: ERROR: installing '/usr/lib64/opensc-pkcs11.so'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /usr/lib64/opensc-pkcs11.so
Failed to add dependency on unit, unit sysinit.target does not exist.
dracut: *** Including module: i18n ***
dracut-install: ERROR: installing 'setfont'
dracut-install: ERROR: installing 'loadkeys'
dracut-install: ERROR: installing 'kbd_mode'
dracut-install: ERROR: installing 'stty'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l setfont loadkeys kbd_mode stty
dracut-install: ERROR: installing 'gzip'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l gzip
dracut: *** Including module: resetnetwork ***
dracut-install: ERROR: failed to install '/usr/lib64/libmnl.so.0' for '/bin/ip'
dracut-install: ERROR: installing 'ip'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l ip
dracut-install: ERROR: failed to install '/usr/lib64/libjq.so.1' for '/usr/bin/jq'
dracut-install: ERROR: failed to install '/usr/lib64/libonig.so.5' for '/usr/bin/jq'
dracut-install: ERROR: installing 'jq'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l jq
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/45resetnetwork/cleanup-resetnetwork.sh' to '/lib/dracut/hooks/cleanup/95-cleanup-resetnetwork.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/45resetnetwork/cleanup-resetnetwork.sh /lib/dracut/hooks/cleanup/95-cleanup-resetnetwork.sh
dracut: *** Including module: sshd ***
dracut: Didn't find any SSH host key!
dracut: *** Including module: crypt ***
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90crypt/parse-crypt.sh' to '/lib/dracut/hooks/cmdline/30-parse-crypt.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/90crypt/parse-crypt.sh /lib/dracut/hooks/cmdline/30-parse-crypt.sh
/usr/lib/dracut/modules.d/90crypt/module-setup.sh: line 122: /sbin/blkid: Permission denied
/usr/lib/dracut/modules.d/90crypt/module-setup.sh: line 122: /sbin/blkid: Permission denied
/usr/lib/dracut/modules.d/90crypt/module-setup.sh: line 122: /sbin/blkid: Permission denied
/usr/lib/dracut/modules.d/90crypt/module-setup.sh: line 122: /sbin/blkid: Permission denied
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90crypt/crypt-lib.sh' to '/lib/dracut-crypt-lib.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/90crypt/crypt-lib.sh /lib/dracut-crypt-lib.sh
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90crypt/crypt-run-generator.sh' to '/sbin/crypt-run-generator'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/90crypt/crypt-run-generator.sh /sbin/crypt-run-generator
dracut-install: ERROR: failed to install '/usr/lib64/libcryptsetup.so.12' for '/lib/systemd/systemd-cryptsetup'
dracut-install: ERROR: failed to install '/lib64/libuuid.so.1' for '/lib/systemd/systemd-cryptsetup'
dracut-install: ERROR: failed to install '/lib64/libdevmapper.so.1.02' for '/lib/systemd/systemd-cryptsetup'
dracut-install: ERROR: failed to install '/usr/lib64/libssl.so.1.1' for '/lib/systemd/systemd-cryptsetup'
dracut-install: ERROR: failed to install '/usr/lib64/libargon2.so.1' for '/lib/systemd/systemd-cryptsetup'
dracut-install: ERROR: failed to install '/usr/lib64/libjson-c.so.5' for '/lib/systemd/systemd-cryptsetup'
dracut-install: ERROR: failed to install '/lib64/libudev.so.1' for '/lib/systemd/systemd-cryptsetup'
dracut-install: ERROR: failed to install '/lib64/libpthread.so.0' for '/lib/systemd/systemd-cryptsetup'
/usr/lib/dracut/modules.d/90crypt/module-setup.sh: line 49: /sbin/dmsetup: Permission denied
dracut: *** Including module: dm ***
dracut-install: ERROR: installing 'dmsetup'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l dmsetup
dracut-install: ERROR: failed to install '/lib64/libdevmapper-event.so.1.02' for '/sbin/dmeventd'
dracut-install: ERROR: installing '/lib/udev/rules.d/10-dm.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/10-dm.rules
dracut-install: ERROR: installing '/lib/udev/rules.d/13-dm-disk.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/13-dm-disk.rules
dracut-install: ERROR: installing '/lib/udev/rules.d/95-dm-notify.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/95-dm-notify.rules
dracut: Skipping udev rule: 64-device-mapper.rules
dracut: Skipping udev rule: 60-persistent-storage-dm.rules
dracut: Skipping udev rule: 55-dm.rules
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90dm/11-dm.rules' to '/etc/udev/rules.d/11-dm.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/90dm/11-dm.rules /etc/udev/rules.d/11-dm.rules
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90dm/59-persistent-storage-dm.rules' to '/etc/udev/rules.d/59-persistent-storage-dm.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/90dm/59-persistent-storage-dm.rules /etc/udev/rules.d/59-persistent-storage-dm.rules
/usr/lib/dracut/dracut-init.sh: line 509: /bin/udevadm: Permission denied
dracut: Failed to detect udev version!
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90dm/dm-shutdown.sh' to '/lib/dracut/hooks/shutdown/25-dm-shutdown.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/90dm/dm-shutdown.sh /lib/dracut/hooks/shutdown/25-dm-shutdown.sh
dracut: *** Including module: kernel-modules ***
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90kernel-modules/insmodpost.sh' to '/sbin/insmodpost.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/90kernel-modules/insmodpost.sh /sbin/insmodpost.sh
dracut-install: could not get modinfo from 'tps6598x': Permission denied
dracut-install: dracut_install '/lib/modules/5.15.112-debug//kernel/drivers/base/regmap/regmap-i2c.ko' '/lib/modules/5.15.112-debug//kernel/drivers/base/regmap/regmap-i2c.ko' ERROR
dracut-install: could not get modinfo from 'pi3usb30532': Permission denied
dracut-install: could not get modinfo from 'tcpci': Permission denied
dracut-install: could not get modinfo from 'regmap_i2c': Permission denied
dracut-install: could not get modinfo from 'tcpci_rt1711h': Permission denied
dracut-install: could not get modinfo from 'tcpci': Permission denied
dracut-install: could not get modinfo from 'fusb302': Permission denied
dracut-install: could not get modinfo from 'typec_displayport': Permission denied
dracut-install: could not get modinfo from 'iTCO_wdt': Permission denied
dracut-install: dracut_install '/lib/modules/5.15.112-debug//kernel/drivers/watchdog/iTCO_vendor_support.ko' '/lib/modules/5.15.112-debug//kernel/drivers/watchdog/iTCO_vendor_support.ko' ERROR
dracut-install: could not get modinfo from 'sp5100_tco': Permission denied
dracut-install: could not get modinfo from 'iTCO_vendor_support': Permission denied
dracut-install: could not get modinfo from 'crypto_user': Permission denied
dracut-install: could not get modinfo from 'qat_c3xxxvf': Permission denied
dracut-install: dracut_install '/lib/modules/5.15.112-debug//updates/drivers/crypto/qat/qat_common/intel_qat.ko' '/lib/modules/5.15.112-debug//updates/drivers/crypto/qat/qat_common/intel_qat.ko' ERROR
dracut-install: could not get modinfo from 'intel_qat': Permission denied
dracut-install: could not get modinfo from 'qat_c3xxx': Permission denied
dracut-install: could not get modinfo from 'intel_qat': Permission denied
dracut-install: could not get modinfo from 'qat_c3xxxvf': Permission denied
dracut-install: could not get modinfo from 'qat_c3xxx': Permission denied
dracut: *** Including module: kernel-modules-extra ***
dracut-install: could not get modinfo from 'usdm_drv': Permission denied
dracut-install: could not get modinfo from 'intel_qat': Permission denied
dracut-install: could not get modinfo from 'qat_c3xxx': Permission denied
dracut-install: could not get modinfo from 'intel_qat': Permission denied
dracut-install: could not get modinfo from 'qat_c3xxxvf': Permission denied
dracut: *** Including module: zfs ***
dracut-install: ERROR: installing '/lib/udev/rules.d/90-zfs.rules' to '/etc/udev/rules.d/90-zfs.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/90-zfs.rules /etc/udev/rules.d/90-zfs.rules
dracut-install: ERROR: installing '/lib/udev/vdev_id'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /lib/udev/vdev_id
dracut-install: ERROR: installing '/lib/udev/rules.d/69-vdev.rules' to '/etc/udev/rules.d/69-vdev.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/69-vdev.rules /etc/udev/rules.d/69-vdev.rules
dracut-install: ERROR: installing '/lib/udev/zvol_id'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /lib/udev/zvol_id
dracut-install: ERROR: installing '/lib/udev/rules.d/60-zvol.rules' to '/etc/udev/rules.d/60-zvol.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/60-zvol.rules /etc/udev/rules.d/60-zvol.rules
dracut-install: ERROR: installing 'hostid'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l hostid
dracut-install: ERROR: installing 'grep'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l grep
dracut-install: ERROR: installing '/sbin/zgenhostid'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /sbin/zgenhostid
dracut-install: ERROR: failed to install '/lib64/libzfs.so.4' for '/sbin/zfs'
dracut-install: ERROR: failed to install '/lib64/libzfs_core.so.3' for '/sbin/zfs'
dracut-install: ERROR: failed to install '/lib64/libnvpair.so.3' for '/sbin/zfs'
dracut-install: ERROR: failed to install '/lib64/libuutil.so.3' for '/sbin/zfs'
dracut-install: ERROR: failed to install '/lib64/libtirpc.so.3' for '/sbin/zfs'
dracut-install: ERROR: installing '/sbin/zfs'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /sbin/zfs
dracut-install: ERROR: installing '/sbin/zpool'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /sbin/zpool
/usr/lib/dracut/modules.d/90zfs/module-setup.sh: /usr/bin/gcc-config: /usr/bin/env: bad interpreter: Permission denied
dracut-install: ERROR: installing '/usr/lib/gcc///libgcc_s.so.1'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /usr/lib/gcc///libgcc_s.so.1
dracut-install: ERROR: installing '/sbin/mount.zfs'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /sbin/mount.zfs
dracut-install: ERROR: failed to install '/usr/lib64/libmpfr.so.6' for '/bin/../usr/bin/gawk'
dracut-install: ERROR: failed to install '/usr/lib64/libgmp.so.10' for '/bin/../usr/bin/gawk'
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90zfs/parse-zfs.sh' to '/lib/dracut/hooks/cmdline/95-parse-zfs.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/90zfs/parse-zfs.sh /lib/dracut/hooks/cmdline/95-parse-zfs.sh
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90zfs/zfs-generator.sh' to '/lib/systemd/system-generators/dracut-zfs-generator'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/90zfs/zfs-generator.sh /lib/systemd/system-generators/dracut-zfs-generator
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90zfs/zfs-load-key.sh' to '/lib/dracut/hooks/pre-mount/90-zfs-load-key.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/90zfs/zfs-load-key.sh /lib/dracut/hooks/pre-mount/90-zfs-load-key.sh
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90zfs/mount-zfs.sh' to '/lib/dracut/hooks/mount/98-mount-zfs.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/90zfs/mount-zfs.sh /lib/dracut/hooks/mount/98-mount-zfs.sh
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90zfs/zfs-needshutdown.sh' to '/lib/dracut/hooks/cleanup/99-zfs-needshutdown.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/90zfs/zfs-needshutdown.sh /lib/dracut/hooks/cleanup/99-zfs-needshutdown.sh
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90zfs/export-zfs.sh' to '/lib/dracut/hooks/shutdown/20-export-zfs.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/90zfs/export-zfs.sh /lib/dracut/hooks/shutdown/20-export-zfs.sh
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90zfs/zfs-lib.sh' to '/lib/dracut-zfs-lib.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/90zfs/zfs-lib.sh /lib/dracut-zfs-lib.sh
dracut-install: ERROR: installing '/etc/hostid'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /etc/hostid
dracut-install: ERROR: installing '/lib/systemd/system/zfs-import-scan.service'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /lib/systemd/system/zfs-import-scan.service
dracut-install: ERROR: installing '/lib/systemd/system/zfs-import-cache.service'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /lib/systemd/system/zfs-import-cache.service
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90zfs/zfs-env-bootfs.service' to '/lib/systemd/system/zfs-env-bootfs.service'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/90zfs/zfs-env-bootfs.service /lib/systemd/system/zfs-env-bootfs.service
dracut-install: ERROR: installing '/lib/systemd/system/zfs-import.target'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /lib/systemd/system/zfs-import.target
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90zfs/zfs-snapshot-bootfs.service' to '/lib/systemd/system/zfs-snapshot-bootfs.service'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/90zfs/zfs-snapshot-bootfs.service /lib/systemd/system/zfs-snapshot-bootfs.service
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/90zfs/zfs-rollback-bootfs.service' to '/lib/systemd/system/zfs-rollback-bootfs.service'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/90zfs/zfs-rollback-bootfs.service /lib/systemd/system/zfs-rollback-bootfs.service
dracut-install: could not get modinfo from 'zfs': Permission denied
dracut-install: dracut_install '/lib/modules/5.15.112-debug//extra/spl/spl.ko' '/lib/modules/5.15.112-debug//extra/spl/spl.ko' ERROR
dracut-install: dracut_install '/lib/modules/5.15.112-debug//extra/nvpair/znvpair.ko' '/lib/modules/5.15.112-debug//extra/nvpair/znvpair.ko' ERROR
dracut-install: dracut_install '/lib/modules/5.15.112-debug//extra/zcommon/zcommon.ko' '/lib/modules/5.15.112-debug//extra/zcommon/zcommon.ko' ERROR
dracut-install: dracut_install '/lib/modules/5.15.112-debug//extra/icp/icp.ko' '/lib/modules/5.15.112-debug//extra/icp/icp.ko' ERROR
dracut-install: dracut_install '/lib/modules/5.15.112-debug//extra/avl/zavl.ko' '/lib/modules/5.15.112-debug//extra/avl/zavl.ko' ERROR
dracut-install: dracut_install '/lib/modules/5.15.112-debug//extra/lua/zlua.ko' '/lib/modules/5.15.112-debug//extra/lua/zlua.ko' ERROR
dracut-install: dracut_install '/lib/modules/5.15.112-debug//extra/zstd/zzstd.ko' '/lib/modules/5.15.112-debug//extra/zstd/zzstd.ko' ERROR
dracut-install: dracut_install '/lib/modules/5.15.112-debug//extra/unicode/zunicode.ko' '/lib/modules/5.15.112-debug//extra/unicode/zunicode.ko' ERROR
dracut-install: could not get modinfo from 'zcommon': Permission denied
dracut-install: could not get modinfo from 'spl': Permission denied
dracut-install: could not get modinfo from 'znvpair': Permission denied
dracut-install: could not get modinfo from 'znvpair': Permission denied
dracut-install: could not get modinfo from 'spl': Permission denied
dracut-install: could not get modinfo from 'zavl': Permission denied
dracut-install: could not get modinfo from 'spl': Permission denied
dracut-install: could not get modinfo from 'zunicode': Permission denied
dracut-install: could not get modinfo from 'zlua': Permission denied
dracut-install: could not get modinfo from 'icp': Permission denied
dracut-install: could not get modinfo from 'spl': Permission denied
dracut-install: could not get modinfo from 'znvpair': Permission denied
dracut-install: could not get modinfo from 'zcommon': Permission denied
dracut-install: could not get modinfo from 'spl': Permission denied
dracut: *** Including module: crypt-gpg ***
dracut-install: ERROR: failed to install '/lib64/libbz2.so.1' for '/usr/bin/gpg'
dracut-install: ERROR: failed to install '/usr/lib64/libassuan.so.0' for '/usr/bin/gpg'
dracut-install: ERROR: installing 'gpg'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l gpg tr
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/91crypt-gpg/crypt-gpg-lib.sh' to '/lib/dracut-crypt-gpg-lib.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/91crypt-gpg/crypt-gpg-lib.sh /lib/dracut-crypt-gpg-lib.sh
dracut: *** Including module: resume ***
dracut: *** Including module: rootfs-block ***
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/95rootfs-block/rootfallback.sh' to '/lib/dracut/hooks/initqueue/timeout/99-rootfallback.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/95rootfs-block/rootfallback.sh /lib/dracut/hooks/initqueue/timeout/99-rootfallback.sh
dracut: *** Including module: terminfo ***
dracut: *** Including module: udev-rules ***
dracut-install: ERROR: installing 'cat'
dracut-install: ERROR: installing 'blkid'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l udevadm cat uname blkid
dracut: Skipping udev rule: 40-redhat.rules
dracut: Skipping udev rule: 50-firmware.rules
dracut: Skipping udev rule: 50-udev.rules
dracut-install: ERROR: installing '/lib/udev/rules.d/50-udev-default.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/50-udev-default.rules
dracut-install: ERROR: installing '/lib/udev/rules.d/60-block.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/60-block.rules
dracut-install: ERROR: installing '/lib/udev/cdrom_id'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /lib/udev/cdrom_id
dracut-install: ERROR: installing '/lib/udev/rules.d/60-cdrom_id.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/60-cdrom_id.rules
dracut-install: ERROR: installing '/lib/udev/ata_id'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /lib/udev/ata_id
dracut-install: ERROR: installing '/lib/udev/scsi_id'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l /lib/udev/scsi_id
dracut-install: ERROR: installing '/lib/udev/rules.d/60-persistent-storage.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/60-persistent-storage.rules
dracut-install: ERROR: installing '/lib/udev/rules.d/64-btrfs.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/64-btrfs.rules
dracut-install: ERROR: installing '/lib/udev/rules.d/75-net-description.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/75-net-description.rules
dracut-install: ERROR: installing '/lib/udev/rules.d/80-drivers.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/80-drivers.rules
dracut-install: ERROR: installing '/lib/udev/rules.d/80-net-setup-link.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/udev/rules.d/80-net-setup-link.rules
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/95udev-rules/59-persistent-storage.rules' to '/etc/udev/rules.d/59-persistent-storage.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/95udev-rules/59-persistent-storage.rules /etc/udev/rules.d/59-persistent-storage.rules
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/95udev-rules/61-persistent-storage.rules' to '/etc/udev/rules.d/61-persistent-storage.rules'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/95udev-rules/61-persistent-storage.rules /etc/udev/rules.d/61-persistent-storage.rules
/usr/lib/dracut/dracut-init.sh: line 509: /bin/udevadm: Permission denied
dracut: Failed to detect udev version!
dracut: Skipping udev rule: 91-permissions.rules
dracut: Skipping udev rule: 80-drivers-modprobe.rules
dracut: Skipping udev rule: 70-persistent-net.rules
dracut: *** Including module: dracut-systemd ***
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/98dracut-systemd/dracut-emergency.sh' to '/bin/dracut-emergency'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/98dracut-systemd/dracut-emergency.sh /bin/dracut-emergency
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/98dracut-systemd/dracut-cmdline.sh' to '/bin/dracut-cmdline'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/98dracut-systemd/dracut-cmdline.sh /bin/dracut-cmdline
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/98dracut-systemd/dracut-cmdline-ask.sh' to '/bin/dracut-cmdline-ask'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/98dracut-systemd/dracut-cmdline-ask.sh /bin/dracut-cmdline-ask
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/98dracut-systemd/dracut-pre-udev.sh' to '/bin/dracut-pre-udev'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/98dracut-systemd/dracut-pre-udev.sh /bin/dracut-pre-udev
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/98dracut-systemd/dracut-pre-trigger.sh' to '/bin/dracut-pre-trigger'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/98dracut-systemd/dracut-pre-trigger.sh /bin/dracut-pre-trigger
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/98dracut-systemd/dracut-initqueue.sh' to '/bin/dracut-initqueue'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/98dracut-systemd/dracut-initqueue.sh /bin/dracut-initqueue
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/98dracut-systemd/dracut-pre-mount.sh' to '/bin/dracut-pre-mount'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/98dracut-systemd/dracut-pre-mount.sh /bin/dracut-pre-mount
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/98dracut-systemd/dracut-mount.sh' to '/bin/dracut-mount'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/98dracut-systemd/dracut-mount.sh /bin/dracut-mount
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/98dracut-systemd/dracut-pre-pivot.sh' to '/bin/dracut-pre-pivot'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/98dracut-systemd/dracut-pre-pivot.sh /bin/dracut-pre-pivot
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/98dracut-systemd/rootfs-generator.sh' to '/lib/systemd/system-generators/dracut-rootfs-generator'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/98dracut-systemd/rootfs-generator.sh /lib/systemd/system-generators/dracut-rootfs-generator
Failed to add dependency on unit, unit initrd.target does not exist.
Failed to add dependency on unit, unit initrd.target does not exist.
Failed to add dependency on unit, unit initrd.target does not exist.
Failed to add dependency on unit, unit initrd.target does not exist.
Failed to add dependency on unit, unit initrd.target does not exist.
Failed to add dependency on unit, unit initrd.target does not exist.
Failed to add dependency on unit, unit initrd.target does not exist.
Failed to add dependency on unit, unit initrd.target does not exist.
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/98dracut-systemd/dracut-tmpfiles.conf' to '/usr/lib/tmpfiles.d/dracut-tmpfiles.conf'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/98dracut-systemd/dracut-tmpfiles.conf /usr/lib/tmpfiles.d/dracut-tmpfiles.conf
dracut-install: ERROR: installing 'sulogin'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l sulogin
dracut: *** Including module: selinux ***
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/98selinux/selinux-loadpolicy.sh' to '/lib/dracut/hooks/pre-pivot/50-selinux-loadpolicy.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/98selinux/selinux-loadpolicy.sh /lib/dracut/hooks/pre-pivot/50-selinux-loadpolicy.sh
dracut-install: ERROR: installing 'setenforce'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l setenforce
dracut: *** Including module: usrmount ***
dracut: *** Including module: base ***
dracut-install: ERROR: installing 'mknod'
dracut-install: ERROR: installing 'mkdir'
dracut-install: ERROR: installing 'chown'
dracut-install: ERROR: installing 'sed'
dracut-install: ERROR: installing 'ls'
dracut-install: ERROR: installing 'flock'
dracut-install: ERROR: failed to install '/lib64/libattr.so.1' for '/bin/cp'
dracut-install: ERROR: installing 'cp'
dracut-install: ERROR: installing 'mv'
dracut-install: ERROR: installing 'dmesg'
dracut-install: ERROR: installing 'rm'
dracut-install: ERROR: installing 'ln'
dracut-install: ERROR: installing 'setsid'
dracut-install: ERROR: installing 'chmod'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l mount mknod mkdir sleep chroot chown sed ls flock cp mv dmesg rm ln rmmod mkfifo umount readlink setsid modprobe chmod tr
dracut-install: ERROR: failed to install '/lib64/libsmartcols.so.1' for '/bin/findmnt'
dracut-install: ERROR: installing '/usr/lib/dracut/dracut-util' to '/usr/bin/dracut-util'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/dracut-util /usr/bin/dracut-util
grep: /etc/shadow: Permission denied
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/99base/initqueue.sh' to '/sbin/initqueue'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/99base/initqueue.sh /sbin/initqueue
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/99base/loginit.sh' to '/sbin/loginit'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/99base/loginit.sh /sbin/loginit
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/99base/rdsosreport.sh' to '/sbin/rdsosreport'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/99base/rdsosreport.sh /sbin/rdsosreport
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/99base/dracut-lib.sh' to '/lib/dracut-lib.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/99base/dracut-lib.sh /lib/dracut-lib.sh
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/99base/dracut-dev-lib.sh' to '/lib/dracut-dev-lib.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /usr/lib/dracut/modules.d/99base/dracut-dev-lib.sh /lib/dracut-dev-lib.sh
dracut: *** Including module: fs-lib ***
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/99fs-lib/fs-lib.sh' to '/lib/fs-lib.sh'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/99fs-lib/fs-lib.sh /lib/fs-lib.sh
dracut: *** Including module: shutdown ***
dracut-install: ERROR: installing 'losetup'
dracut-install: ERROR: installing 'stat'
dracut-install: ERROR: failed to install '/lib64/librt.so.1' for '/usr/bin/timeout'
dracut-install: ERROR: installing 'timeout'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -a -l umount poweroff reboot halt losetup stat sleep timeout
dracut-install: ERROR: installing '/usr/lib/dracut/modules.d/99shutdown/shutdown.sh' to '/shutdown'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs -l /usr/lib/dracut/modules.d/99shutdown/shutdown.sh /shutdown
dracut: *** Including modules done ***
dracut-install: dracut_install 'ahci' ERROR
dracut-install: ERROR: installing 'ahci'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs --kerneldir /lib/modules/5.15.112-debug/ -m ahci kvm kvm_intel mpt3sas nvme zfs
dracut-install: could not get modinfo from 'zfs': Permission denied
dracut-install: could not get modinfo from 'spl': Permission denied
dracut-install: could not get modinfo from 'znvpair': Permission denied
dracut-install: could not get modinfo from 'zcommon': Permission denied
dracut-install: could not get modinfo from 'icp': Permission denied
dracut-install: could not get modinfo from 'zavl': Permission denied
dracut-install: could not get modinfo from 'zlua': Permission denied
dracut-install: could not get modinfo from 'zzstd': Permission denied
dracut-install: could not get modinfo from 'zunicode': Permission denied
dracut: *** Installing kernel module dependencies ***
dracut-install: ERROR: installing '/lib/modules/5.15.112-debug//modules.builtin' to '/lib/modules/5.15.112-debug/modules.builtin'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/modules/5.15.112-debug//modules.builtin /lib/modules/5.15.112-debug/modules.builtin
dracut-install: ERROR: installing '/lib/modules/5.15.112-debug//modules.builtin.modinfo' to '/lib/modules/5.15.112-debug/modules.builtin.modinfo'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/modules/5.15.112-debug//modules.builtin.modinfo /lib/modules/5.15.112-debug/modules.builtin.modinfo
dracut-install: ERROR: installing '/lib/modules/5.15.112-debug//modules.order' to '/lib/modules/5.15.112-debug/modules.order'
dracut: FAILED: /usr/lib/dracut/dracut-install -D /var/tmp/dracut.ZAIRDt/initramfs /lib/modules/5.15.112-debug//modules.order /lib/modules/5.15.112-debug/modules.order
/usr/lib/dracut/dracut-init.sh: line 1006: /sbin/depmod: Permission denied
dracut: "depmod -a 5.15.112-debug" failed.
|
With SELinux set to permissive mode it works without any problems.
I tried building my own module to allow what is denied, but then I get warnings from audit2allow regarding restraint violations.
Could someone please point me in the right direction? |
|
| Back to top |
|
 |
inf1nity
n00b
Joined: 05 Apr 2015
Posts: 15
|
| Posted: Sat May 27, 2023 3:43 pm Post subject: |
|
|
So after spending a lot more hours on this, I looked at how AlmaLinux 8 solves the dracut problem.
They just don't use any specific dracut context:
| Code: |
# Gentoo Linux
/usr/bin/dracut system_u:object_r:dracut_exec_t:s0
# AlmaLinux 8
/usr/bin/dracut system_u:object_r:bin_t:s0
|
After changing the type of the file on Gentoo to bin_t, dracut executes with only one error:
It can't access /etc/shadow for reading. That is needed because it tries to copy it to the initramfs, so that you can use the root password to login to the debug shell.
Now I figured out how to allow dracut_t to access that file, but after I changed the above type to bin_t, dracut no longer runs as dracut_t and since I don't want to allow just any binary belonging to bin_t access to /etc/shadow, I don't know how to resolve this at the moment.
Here is the dracut SELinux module addition, so that it can read /etc/shadow:
| Code: |
module my-dracut 1.0;
require {
type shadow_t;
type dracut_t;
class file { read };
attribute can_read_shadow_passwords;
}
typeattribute dracut_t can_read_shadow_passwords;
allow dracut_t shadow_t:file read;
|
How can I solve this issue?
Does anyone know if and when the dracut SELinux policy will be production ready? |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
