sturakov
March 17, 2022, 12:16am
1
Hello everyone,
I’ve been trying to investigate the following problem:sudo dnf upgrade and I get the Error: Transaction failed.
I was able to successfully upgrade from Fedora 35 to Fedora 36 Beta
As in, I was able to boot, login, and use various apps.
But sudo dnf upgrade doesn’t upgrade all packages successfully.
I’m copying the entire output here:
╭─ ~ ▓▒░────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────░▒▓ 1 ✘ at 04:50:53 PM ─╮
╰─ sudo dnf upgrade --refresh ─╯
1Password Beta Channel 17 kB/s | 3.0 kB 00:00
Copr repo for g810-led owned by lkiesow 6.2 kB/s | 3.3 kB 00:00
Copr repo for gnome-shell-mutter-tripplebuffered-41 owned by shrisha 638 B/s | 341 B 00:00
Errors during downloading metadata for repository 'copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41':
- Status code: 404 for https://download.copr.fedorainfracloud.org/results/shrisha/gnome-shell-mutter-tripplebuffered-41/fedora-36-x86_64/repodata/repomd.xml (IP: 2600:9000:2146:f600:4:bbc1:1840:93a1)
Error: Failed to download metadata for repo 'copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Copr repo for PyCharm owned by phracek 9.3 kB/s | 3.3 kB 00:00
Docker CE Stable - x86_64 573 B/s | 384 B 00:00
Errors during downloading metadata for repository 'docker-ce-stable':
- Status code: 404 for https://download.docker.com/linux/fedora/36/x86_64/stable/repodata/repomd.xml (IP: 2600:9000:2146:e400:3:db06:4200:93a1)
Error: Failed to download metadata for repo 'docker-ce-stable': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Fedora 36 - x86_64 23 kB/s | 8.6 kB 00:00
Fedora 36 openh264 (From Cisco) - x86_64 2.9 kB/s | 989 B 00:00
Fedora Modular 36 - x86_64 27 kB/s | 12 kB 00:00
Fedora 36 - x86_64 - Updates 33 kB/s | 15 kB 00:00
Fedora Modular 36 - x86_64 - Updates 33 kB/s | 15 kB 00:00
Fedora 36 - x86_64 - Test Updates 21 kB/s | 9.3 kB 00:00
Fedora Modular 36 - x86_64 - Test Updates 31 kB/s | 13 kB 00:00
insync repo 611 B/s | 300 B 00:00
Errors during downloading metadata for repository 'insync':
- Status code: 404 for http://yum.insync.io/fedora/36/repodata/repomd.xml (IP: 52.216.242.28)
Error: Failed to download metadata for repo 'insync': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
microsoft-edge 8.5 kB/s | 3.0 kB 00:00
RPM Fusion for Fedora 36 - Free 16 kB/s | 5.6 kB 00:00
RPM Fusion for Fedora 36 - Free tainted 16 kB/s | 5.3 kB 00:00
RPM Fusion for Fedora 36 - Free - Test Updates 15 kB/s | 5.4 kB 00:00
RPM Fusion for Fedora 36 - Nonfree 15 kB/s | 5.5 kB 00:00
RPM Fusion for Fedora 36 - Nonfree - NVIDIA Driver 16 kB/s | 5.6 kB 00:00
RPM Fusion for Fedora 36 - Nonfree - Steam 16 kB/s | 5.4 kB 00:00
RPM Fusion for Fedora 36 - Nonfree tainted 16 kB/s | 5.4 kB 00:00
RPM Fusion for Fedora 36 - Nonfree - Test Updates 14 kB/s | 5.1 kB 00:00
Scooter Software 7.8 kB/s | 2.9 kB 00:00
slack 3.8 kB/s | 1.8 kB 00:00
Sublime Text - x86_64 - Stable 6.7 kB/s | 2.9 kB 00:00
vivaldi 21 kB/s | 2.9 kB 00:00
Visual Studio Code 14 kB/s | 3.0 kB 00:00
ZFS on Linux for Fedora 36 759 B/s | 243 B 00:00
Errors during downloading metadata for repository 'zfs':
- Status code: 403 for http://download.zfsonlinux.org/fedora/36/x86_64/repodata/repomd.xml (IP: 2600:1fa0:406c:1089:34da:ec99::)
Error: Failed to download metadata for repo 'zfs': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41, docker-ce-stable, insync, zfs
Dependencies resolved.
==============================================================================================================================================================================================
Package Architecture Version Repository Size
==============================================================================================================================================================================================
Upgrading:
flatpak x86_64 1.12.6-1.fc36 updates-testing 1.6 M
snap-confine x86_64 2.54.4-1.fc36 updates-testing 2.2 M
snapd x86_64 2.54.4-1.fc36 updates-testing 13 M
swtpm x86_64 0.7.2-1.20220307git21c90c1.fc36 updates-testing 42 k
Transaction Summary
==============================================================================================================================================================================================
Upgrade 4 Packages
Total download size: 17 M
Is this ok [y/N]: y
Downloading Packages:
(1/4): swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64.rpm 239 kB/s | 42 kB 00:00
(2/4): flatpak-1.12.6-1.fc36.x86_64.rpm 172 kB/s | 1.6 MB 00:09
(3/4): snap-confine-2.54.4-1.fc36.x86_64.rpm 173 kB/s | 2.2 MB 00:12
(4/4): snapd-2.54.4-1.fc36.x86_64.rpm 211 kB/s | 13 MB 01:03
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 270 kB/s | 17 MB 01:04
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Upgrading : snap-confine-2.54.4-1.fc36.x86_64 1/8
error: lsetfilecon: (/usr/libexec/snapd/snap-confine;6232783d, system_u:object_r:snappy_confine_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed
Error unpacking rpm package snap-confine-2.54.4-1.fc36.x86_64
Upgrading : snapd-2.54.4-1.fc36.x86_64 2/8
error: unpacking of archive failed on file /usr/libexec/snapd/snap-confine;6232783d: cpio: (error 0x2)
error: snap-confine-2.54.4-1.fc36.x86_64: install failed
error: lsetfilecon: (/etc/sysconfig/snapd;6232783d, system_u:object_r:snappy_config_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed
Error unpacking rpm package snapd-2.54.4-1.fc36.x86_64
Upgrading : swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64 3/8
error: unpacking of archive failed on file /etc/sysconfig/snapd;6232783d: cpio: (error 0x2)
error: snapd-2.54.4-1.fc36.x86_64: install failed
error: lsetfilecon: (/usr/bin/swtpm;6232783d, system_u:object_r:swtpm_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed
Error unpacking rpm package swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64
Running scriptlet: flatpak-1.12.6-1.fc36.x86_64 4/8
error: unpacking of archive failed on file /usr/bin/swtpm;6232783d: cpio: (error 0x2)
error: swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64: install failed
Upgrading : flatpak-1.12.6-1.fc36.x86_64 4/8
error: lsetfilecon: (/usr/libexec/flatpak-system-helper;6232783d, system_u:object_r:flatpak_helper_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed
Error unpacking rpm package flatpak-1.12.6-1.fc36.x86_64
Verifying : flatpak-1.12.6-1.fc36.x86_64 1/8
Verifying : flatpak-1.12.6-1.fc35.x86_64 2/8
Verifying : snap-confine-2.54.4-1.fc36.x86_64 3/8
Verifying : snap-confine-2.54.3-1.fc36.x86_64 4/8
Verifying : snapd-2.54.4-1.fc36.x86_64 5/8
Verifying : snapd-2.54.3-1.fc35.x86_64 6/8
Verifying : swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64 7/8
Verifying : swtpm-0.7.1-1.20220218git92a7035.fc35.x86_64 8/8
Failed:
flatpak-1.12.6-1.fc35.x86_64 flatpak-1.12.6-1.fc36.x86_64 snap-confine-2.54.3-1.fc36.x86_64 snap-confine-2.54.4-1.fc36.x86_64 snapd-2.54.3-1.fc35.x86_64
snapd-2.54.4-1.fc36.x86_64 swtpm-0.7.1-1.20220218git92a7035.fc35.x86_64 swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64
Error: Transaction failed
I’ve tried various steps here:
I’m not certain how to proceed.
Side note:
I am using ZSH shell, with powerlevel10k theme
Hey there! What happens when you do a
sudo dnf update
instead?
You do realize that fedora 36 is still in testing and is not yet even in beta.
You can expect problems when you try running a testing version since it is still in development.
In general, the likely fix would be to disable all 3rd party repos since most of them are not ready for fedora 36.
1 Like
Wait f36 will be available in public beta and this small issues will be fix and as far as i know public beta will be in next week or so. So you have to wait and it is not recommended to install testing image in production system you will face issues
I’m on F36 now, to help test it before the beta release and I have not seen these issues—but I don’t have snap etc. installed. So it really could just be issues with third party packages as Jeff noted.
Could you give us the output of sudo dnf repolist please?
1 Like
I have the same issue. Snapd, Flatpak, Podman etc failed to upgrade on Fedora 36. They are stuck on Fedora 35 versions. Something about SELinux in the error message. I don’t think it has anything to do with third party packages.
404 means document not found.
<Error>
<Code>NoSuchKey</Code>
<Message>The specified key does not exist.</Message>
<Key>fedora/36/repodata/repomd.xml</Key>
<RequestId>F1ZJV1R9FXJ8T9R6</RequestId>
<HostId>
RJB1xWv1oZ7tIiZ1lFL9htGM5rC1dqZ8rvbZ7SY4m012VMTcnN+iQ2rLPJEYT3vidnT0no8nn8U=
</HostId>
</Error>
For me seams not ready for F36 yet.
sturakov
March 17, 2022, 4:09pm
8
Thank you for taking a look.
╭─ ~ ▓▒░────────────────────────────────────░▒▓ ✔ at 09:03:34 AM ─╮
╰─ sudo dnf update ─╯
Copr repo for gnome-shell-mutter-tripplebuffere 501 B/s | 341 B 00:00
Errors during downloading metadata for repository 'copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41':
- Status code: 404 for https://download.copr.fedorainfracloud.org/results/shrisha/gnome-shell-mutter-tripplebuffered-41/fedora-36-x86_64/repodata/repomd.xml (IP: 2600:9000:2164:e600:4:bbc1:1840:93a1)
Error: Failed to download metadata for repo 'copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Docker CE Stable - x86_64 596 B/s | 384 B 00:00
Errors during downloading metadata for repository 'docker-ce-stable':
- Status code: 404 for https://download.docker.com/linux/fedora/36/x86_64/stable/repodata/repomd.xml (IP: 2600:9000:234d:800:3:db06:4200:93a1)
Error: Failed to download metadata for repo 'docker-ce-stable': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Fedora 36 - x86_64 18 kB/s | 11 kB 00:00
Fedora 36 - x86_64 1.4 MB/s | 1.7 MB 00:01
Fedora Modular 36 - x86_64 29 kB/s | 13 kB 00:00
Fedora Modular 36 - x86_64 114 kB/s | 158 kB 00:01
Fedora 36 - x86_64 - Updates 34 kB/s | 15 kB 00:00
Fedora Modular 36 - x86_64 - Updates 32 kB/s | 15 kB 00:00
Fedora 36 - x86_64 - Test Updates 28 kB/s | 12 kB 00:00
Fedora Modular 36 - x86_64 - Test Updates 31 kB/s | 13 kB 00:00
insync repo 565 B/s | 300 B 00:00
Errors during downloading metadata for repository 'insync':
- Status code: 404 for http://yum.insync.io/fedora/36/repodata/repomd.xml (IP: 52.217.226.49)
Error: Failed to download metadata for repo 'insync': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
RPM Fusion for Fedora 36 - Free tainted 14 kB/s | 4.8 kB 00:00
ZFS on Linux for Fedora 36 722 B/s | 243 B 00:00
Errors during downloading metadata for repository 'zfs':
- Status code: 403 for http://download.zfsonlinux.org/fedora/36/x86_64/repodata/repomd.xml (IP: 2600:1fa0:40bf:ac11:345c:d13a::)
Error: Failed to download metadata for repo 'zfs': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41, docker-ce-stable, insync, zfs
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Upgrading:
flatpak x86_64 1.12.6-1.fc36 updates-testing 1.6 M
snap-confine x86_64 2.54.4-1.fc36 updates-testing 2.2 M
snapd x86_64 2.54.4-1.fc36 updates-testing 13 M
swtpm x86_64 0.7.2-1.20220307git21c90c1.fc36 updates-testing 42 k
Transaction Summary
================================================================================
Upgrade 4 Packages
Total download size: 17 M
Is this ok [y/N]: y
Downloading Packages:
(1/4): swtpm-0.7.2-1.20220307git21c90c1.fc36.x8 359 kB/s | 42 kB 00:00
(2/4): flatpak-1.12.6-1.fc36.x86_64.rpm 2.6 MB/s | 1.6 MB 00:00
(3/4): snap-confine-2.54.4-1.fc36.x86_64.rpm 2.5 MB/s | 2.2 MB 00:00
(4/4): snapd-2.54.4-1.fc36.x86_64.rpm 6.5 MB/s | 13 MB 00:02
--------------------------------------------------------------------------------
Total 6.9 MB/s | 17 MB 00:02
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Upgrading : snap-confine-2.54.4-1.fc36.x86_64 1/8
error: lsetfilecon: (/usr/libexec/snapd/snap-confine;62335c21, system_u:object_r:snappy_confine_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed
Error unpacking rpm package snap-confine-2.54.4-1.fc36.x86_64
Upgrading : snapd-2.54.4-1.fc36.x86_64 2/8
error: unpacking of archive failed on file /usr/libexec/snapd/snap-confine;62335c21: cpio: (error 0x2)
error: snap-confine-2.54.4-1.fc36.x86_64: install failed
error: lsetfilecon: (/etc/sysconfig/snapd;62335c21, system_u:object_r:snappy_config_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed
Error unpacking rpm package snapd-2.54.4-1.fc36.x86_64
Upgrading : swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64 3/8
error: unpacking of archive failed on file /etc/sysconfig/snapd;62335c21: cpio: (error 0x2)
error: snapd-2.54.4-1.fc36.x86_64: install failed
error: lsetfilecon: (/usr/bin/swtpm;62335c21, system_u:object_r:swtpm_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed
Error unpacking rpm package swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64
Running scriptlet: flatpak-1.12.6-1.fc36.x86_64 4/8
error: unpacking of archive failed on file /usr/bin/swtpm;62335c21: cpio: (error 0x2)
error: swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64: install failed
Upgrading : flatpak-1.12.6-1.fc36.x86_64 4/8
error: lsetfilecon: (/usr/libexec/flatpak-system-helper;62335c21, system_u:object_r:flatpak_helper_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed
Error unpacking rpm package flatpak-1.12.6-1.fc36.x86_64
Verifying : flatpak-1.12.6-1.fc36.x86_64 1/8
Verifying : flatpak-1.12.6-1.fc35.x86_64 2/8
Verifying : snap-confine-2.54.4-1.fc36.x86_64 3/8
Verifying : snap-confine-2.54.3-1.fc36.x86_64 4/8
Verifying : snapd-2.54.4-1.fc36.x86_64 5/8
Verifying : snapd-2.54.3-1.fc35.x86_64 6/8
Verifying : swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64 7/8
Verifying : swtpm-0.7.1-1.20220218git92a7035.fc35.x86_64 8/8
Failed:
flatpak-1.12.6-1.fc35.x86_64
flatpak-1.12.6-1.fc36.x86_64
snap-confine-2.54.3-1.fc36.x86_64
snap-confine-2.54.4-1.fc36.x86_64
snapd-2.54.3-1.fc35.x86_64
snapd-2.54.4-1.fc36.x86_64
swtpm-0.7.1-1.20220218git92a7035.fc35.x86_64
swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64
Error: Transaction failed
sturakov
March 17, 2022, 4:10pm
9
You are indeed correct.
I thought it was available March 16th.
But also, where should I bring up these issues if not here?
sturakov
March 17, 2022, 4:11pm
10
I am similarly testing F36 as well.
Output as requested:
╭─ ~ ▓▒░─────────────────────░▒▓ 1 ✘ took 20s at 09:04:51 AM ─╮
╰─ sudo dnf repolist ─╯
repo id repo name
1password 1Password Beta Channel
code Visual Studio Code
copr:copr.fedorainfracloud.org:lkiesow:g810-led Copr repo for g810-led owned by lkiesow
copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41 Copr repo for gnome-shell-mutter-tripplebuffered-41 owned by shrisha
docker-ce-stable Docker CE Stable - x86_64
fedora Fedora 36 - x86_64
fedora-cisco-openh264 Fedora 36 openh264 (From Cisco) - x86_64
fedora-modular Fedora Modular 36 - x86_64
insync insync repo
microsoft-edge microsoft-edge
phracek-PyCharm Copr repo for PyCharm owned by phracek
rpmfusion-free RPM Fusion for Fedora 36 - Free
rpmfusion-free-tainted RPM Fusion for Fedora 36 - Free tainted
rpmfusion-free-updates-testing RPM Fusion for Fedora 36 - Free - Test Updates
rpmfusion-nonfree RPM Fusion for Fedora 36 - Nonfree
rpmfusion-nonfree-nvidia-driver RPM Fusion for Fedora 36 - Nonfree - NVIDIA Driver
rpmfusion-nonfree-steam RPM Fusion for Fedora 36 - Nonfree - Steam
rpmfusion-nonfree-tainted RPM Fusion for Fedora 36 - Nonfree tainted
rpmfusion-nonfree-updates-testing RPM Fusion for Fedora 36 - Nonfree - Test Updates
scootersoftware Scooter Software
slack slack
sublime-text Sublime Text - x86_64 - Stable
updates Fedora 36 - x86_64 - Updates
updates-modular Fedora Modular 36 - x86_64 - Updates
updates-testing Fedora 36 - x86_64 - Test Updates
updates-testing-modular Fedora Modular 36 - x86_64 - Test Updates
vivaldi vivaldi
zfs ZFS on Linux for Fedora 36
2 Likes
sturakov
March 17, 2022, 4:15pm
11
@pizzadude sudo grep "denied" /var/log/audit/audit.log
ype=AVC msg=audit(1647473664.507:5016): avc: denied { search } for pid=132340 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473664.507:5017): avc: denied { search } for pid=132340 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473664.507:5018): avc: denied { search } for pid=132340 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473664.507:5019): avc: denied { search } for pid=132340 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473664.507:5020): avc: denied { search } for pid=132340 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473728.197:5031): avc: denied { search } for pid=133733 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473728.197:5032): avc: denied { search } for pid=133733 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473728.197:5033): avc: denied { search } for pid=133733 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473728.197:5034): avc: denied { search } for pid=133733 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473728.197:5035): avc: denied { search } for pid=133733 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473728.197:5036): avc: denied { search } for pid=133733 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473732.209:5047): avc: denied { search } for pid=133904 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473732.209:5048): avc: denied { search } for pid=133904 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473732.209:5049): avc: denied { search } for pid=133904 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473732.209:5050): avc: denied { search } for pid=133904 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473732.209:5051): avc: denied { search } for pid=133904 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473732.209:5052): avc: denied { search } for pid=133904 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473743.308:5072): avc: denied { search } for pid=134270 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473743.308:5073): avc: denied { search } for pid=134270 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473743.308:5074): avc: denied { search } for pid=134270 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473743.308:5075): avc: denied { search } for pid=134270 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473743.308:5076): avc: denied { search } for pid=134270 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473743.308:5077): avc: denied { search } for pid=134270 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473983.297:5170): avc: denied { write } for pid=140922 comm="rpmdb" name="sysimage" dev="nvme1n1p3" ino=4719 scontext=unconfined_u:unconfined_r:rpmdb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0
type=AVC msg=audit(1647473988.103:5177): avc: denied { write } for pid=141027 comm="rpmdb" name="sysimage" dev="nvme1n1p3" ino=4719 scontext=unconfined_u:unconfined_r:rpmdb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0
type=AVC msg=audit(1647474111.491:5193): avc: denied { mac_admin } for pid=141276 comm="dnf" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474111.666:5195): avc: denied { mac_admin } for pid=141276 comm="dnf" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474111.673:5197): avc: denied { mac_admin } for pid=141276 comm="dnf" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474111.723:5199): avc: denied { mac_admin } for pid=141276 comm="dnf" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474510.534:5203): avc: denied { execute } for pid=154327 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647474749.892:5228): avc: denied { mac_admin } for pid=158515 comm="dnf" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474750.065:5230): avc: denied { mac_admin } for pid=158515 comm="dnf" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474750.073:5232): avc: denied { mac_admin } for pid=158515 comm="dnf" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474750.122:5234): avc: denied { mac_admin } for pid=158515 comm="dnf" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474843.705:5238): avc: denied { execute } for pid=164279 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647478438.350:5287): avc: denied { search } for pid=252251 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647478438.350:5288): avc: denied { search } for pid=252251 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647478438.350:5289): avc: denied { search } for pid=252251 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647478438.350:5290): avc: denied { search } for pid=252251 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647478438.350:5291): avc: denied { search } for pid=252251 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647478438.350:5292): avc: denied { search } for pid=252251 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647478443.654:5300): avc: denied { execute } for pid=252422 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647478478.840:5309): avc: denied { write } for pid=253292 comm="rpm" name="rpmdb.sqlite-wal" dev="nvme1n1p3" ino=3510081 scontext=system_u:system_r:setroubleshoot_fixit_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0
type=AVC msg=audit(1647478478.840:5310): avc: denied { setattr } for pid=253292 comm="rpm" name="rpmdb.sqlite-wal" dev="nvme1n1p3" ino=3510081 scontext=system_u:system_r:setroubleshoot_fixit_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0
type=AVC msg=audit(1647478478.840:5311): avc: denied { write } for pid=253292 comm="rpm" name="rpmdb.sqlite-shm" dev="nvme1n1p3" ino=3510082 scontext=system_u:system_r:setroubleshoot_fixit_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0
type=AVC msg=audit(1647478478.840:5312): avc: denied { setattr } for pid=253292 comm="rpm" name="rpmdb.sqlite-shm" dev="nvme1n1p3" ino=3510082 scontext=system_u:system_r:setroubleshoot_fixit_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0
type=AVC msg=audit(1647478479.205:5314): avc: denied { dac_override } for pid=253297 comm="touch" capability=1 scontext=system_u:system_r:setroubleshoot_fixit_t:s0 tcontext=system_u:system_r:setroubleshoot_fixit_t:s0 tclass=capability permissive=0
type=AVC msg=audit(1647478479.205:5315): avc: denied { dac_override } for pid=253297 comm="touch" capability=1 scontext=system_u:system_r:setroubleshoot_fixit_t:s0 tcontext=system_u:system_r:setroubleshoot_fixit_t:s0 tclass=capability permissive=0
type=AVC msg=audit(1647532761.086:191): avc: denied { mac_admin } for pid=1 comm="systemd" capability=33 scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=capability2 permissive=0
type=AVC msg=audit(1647532834.056:694): avc: denied { execute } for pid=6464 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647532883.633:715): avc: denied { execute } for pid=7881 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647532883.648:717): avc: denied { execute } for pid=7884 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647532884.710:719): avc: denied { execute } for pid=7957 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647532886.634:722): avc: denied { execute } for pid=8036 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647533090.601:767): avc: denied { mac_admin } for pid=12244 comm="dnf" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647533090.745:769): avc: denied { mac_admin } for pid=12244 comm="dnf" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647533090.752:771): avc: denied { mac_admin } for pid=12244 comm="dnf" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647533090.807:773): avc: denied { mac_admin } for pid=12244 comm="dnf" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
I’ve tried relabeling my entire system, but that does not seem to fix the issue.
@ilikelinux Thanks for the suggestion.
1 Like
@sturakov Can you report the bug at bugzilla.redhat.com and link your bug report in this thread?
sturakov
March 17, 2022, 8:02pm
13
Thank’s for the suggestion!1788455 – SELinux is preventing dnf from using the 'mac_admin' capabilities. ).
I’ll definitely provide the link back here.
Unfortunately you are trying to use a development version of fedora (36) and using 3rd party repos that are probably not in sync with fedora 36 at present.
I am using fedora 36 but am not attempting to use any 3rd party repos as yet and have encountered no errors so far.
My recommendation to everyone is to continue using the current versions of fedora (34 & 35) as long as you are using 3rd party repos. Once F36 is near the end of the beta and ready for release then the 3rd party repos should be able to catch up and remain in sync from then on.
In the meantime, though, if at all possible, please contact the providers of these third party repos and inform them of Fedora 36’s impending release so that they can start preparing—that way they’ll hopefully be ready by release time.
grumpey
March 18, 2022, 10:35am
16
Testing F36, was able to upgrade from F35 without incident.
for the rpmdb avc denials can you take a look at:https://bugzilla.redhat.com/show_bug.cgi?id=2061141
Have you checked with SELINUX disabled?
I would also recommend disabling the third party repositories while troubleshooting this, or at least at a minimum disabling the ones you can visibly see aren’t working to minimize the noise.
Thanks for testing the new release.
oturpe
March 31, 2022, 8:46am
17
Happened for me and others too. And still happens after Beta was GO.https://bugzilla.redhat.com/show_bug.cgi?id=2056303
Setting selinux to permissive allows installing the problem packages.
Attempting to recover by doing selinux relabelling may result in a system where login is not possible,2069102 – failed boot with selinux set to enforcing
Nvidia is not related either, I for instance do not have Nvidia on my affected system.
1 Like
