Tumbleweed - error on boot: "Unable to load SELinux policy"

[amezin]

I build openSUSE Tumbleweed image using Packer from this AutoYAST config: gnome-shell-box/opensuse.xml at master · ddterm/gnome-shell-box · GitHub (derived from data/install-script/opensuse.org/opensuse-autoyast-desktop.xml.in · main · libosinfo / osinfo-db · GitLab)

Since a few days ago, these images fail to boot, with “Unable to load SELinux policy” error.

I have <pattern>apparmor</pattern> in my config, not SELinux. What am I missing?

[malcolmlewis]

@amezin Hi and welcome to the Forum
Tumbleweed switched to Selinux as the default from snapshot 20250211 , if using the iso and installer you can select either, probably not on the images…

[amezin]

I’m building it from netinst iso - https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-NET-x86_64-Current.iso

Just QEMU, booting the iso, with the AutoYAST config I already linked. It results in a system that can not boot.

How do I “select” SELinux or Apparmor? If patterns don’t work/aren’t enough

[malcolmlewis]

@amezin So you can’t switch to Selinux?

[arvidjaar]

@amezin

How do I “select” SELinux or Apparmor?

AutoYaST Guide

[fkrueger]

Might be related: 1237202 – [SELinux] ordering cycle during relabel with active nfs mounts in fstab

[fkrueger]

JFYI: There has been an issue with autoyast and SELinux discovered by openQA, but I am not sure whether this has been solved: 1231490 – [Build 20241008-SELinux] openQA test fails in installation: AutoYaST forgets SELinux packages.