Hi all,
I’m running into issues with Fedora CoreOS 42.20250410.3.2 when deploying a bootstrap node for OKD on KubeVirt.
The node fails to finalize the boot process with the following error in the console:
error: ostree-finalize-staged.service failed on previous boot: Finalizing deployment: Finalizing SELinux policy: failed to run semodule: Child process exited with code 1
What I’ve Verified:
SELinux is enabled and enforcing with policy version 34.
semodule -B fails during boot finalization.
No rollback deployment is available (rpm-ostree rollback reports none).
I am using the quay.io/fedora/fedora-coreos-kubevirt:stable image.
This started happening after the upgrade to Fedora 42-based builds.
Reproducible in multiple fresh deployments.
What I Tried:
Switching to the testing stream gave the same error.
Attempted to pin older versions (like 41.20250331.3.0) but these seem no longer available in Quay.
Attempted manual semodule -B, which fails.
My Environment:
Platform: KubeVirt VMs
Use Case: OKD Bootstrap Node
Image Source: quay.io/fedora/fedora-coreos-kubevirt:stable
Questions:
Is this a known issue with Fedora CoreOS 42 in KubeVirt?
Are older releases of Fedora CoreOS KubeVirt images archived or available anywhere?
Should I open a bug report or is this already tracked somewhere?
Are there any recommended mitigations or workarounds?
Any insights or directions would be greatly appreciated.
Thanks in advance!