I’m running into this issue again today.
It seems to be due to my derive of the ublue-os image.
I get this selinux policy that fails to apply on ostree-finalize-staged.
I can’t figure out where this policy comes from :
# find /etc -name lang_ext | grep procmail
/etc/selinux/targeted/active/modules/100/procmail/lang_ext
# rpm -qf /etc/selinux/targeted/active/modules/100/procmail/lang_ext
file /etc/selinux/targeted/active/modules/100/procmail/lang_ext is not owned by any package
# ls -l /etc/selinux/targeted/active/modules/100/procmail/
total 20
-rw-------. 1 root root 2737 Dec 14 10:45 cil
-rw-------. 1 root root 11121 Dec 14 10:45 hll
-rw-------. 1 root root 2 Dec 14 10:45 lang_ext
When running ostree finalize manually I get the same error :
sudo /usr/bin/ostree admin finalize-staged -v
OT: remounted /sysroot writable
OT: Deployment 182862618f3f7e1baf74e48fe3386ea054e5c3a07be15c46f71b95f1958012ca.0 unlocked=0
OT: Deployment ce266a106575953fb7ddaf0a819c77cd38ed28c878cce010d3ec6970b8ed2173.0 unlocked=0
Copying /etc changes: 21 modified, 0 removed, 103 added
libsemanage.semanage_direct_get_module_info: Unable to open procmail module lang ext file at /etc/selinux/targeted/tmp/modules/100/procmail/lang_ext. (No such file or directory).
semodule: Failed!
error: Child process exited with code 1
According to this log /etc/selinux/targeted/tmp/modules/100/procmail/lang_ext is not found, but maybe the tmp in the path should not be there ?
I don’t know what to look for to solve this