Upgrade 15.6 to 16.0 with migration tool selinux problem

English Install/Boot/Login
1

Hello,
After upgrading leap 15.6 headless vm to leap 16.0 with opensuse-migration-tool,
alot of services failed to start with selinux errors like:

systemd[1]: default.target: Failed to read SELinux context of '/usr/lib/systemd/system/multi-user.target', ignoring: Operation not permitted

following by same messages for all other services.
Disabling selinux with kernel cmdline selinux=0 fixes problems
and system starts fine.
Probably some selinux config package is missing but i can’t figure
which one, maybe someone can guide how to fix this problem?

2

Show

ls -lZ /usr/lib/systemd/system/multi-user.target

The message says “ignoring” and you did not explain what problems you observed beyond these messages.

3 
ls -lZ /usr/lib/systemd/system/multi-user.target
-rw-r--r-- 1 root root ? 540 Jul  1 13:02 /usr/lib/systemd/system/multi-user.target

The main problem was dbus service failed to start and networking because of it,
here is paste grep -i selinux /var/log/messages of all selinux errors

4

Manualy installing all selinux stuff:

sudo zypper in --no-recommends patterns-base-selinux

fixed problems, so wondering why migration tool not installed it.

5

The problem you describe more likely results from the SELinux being already installed before migration but not active. In which case opensuse-migration-tool does not trigger relabeling.

What exactly has been installed? You should always copy and paste the command output, not describe it.

In any case, you should open bug report.

1 Like
6

No selinux wasn’t already installed, it was surprise for me it was enabled after upgrade to 16.0. Only audit=1 was enabled in cmdline before upgrade for auditd daemon.
Here what was installed with sudo zypper in --no-recommends patterns-base-selinux:

The following 5 NEW packages are going to be installed:
  cepces-selinux patterns-base-selinux selinux-autorelabel selinux-policy selinux-policy-targeted

The following NEW pattern is going to be installed:
  selinux

5 new packages to install.
7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.