Issue #540
Updated by bmbouter about 9 years ago
+++ This bug was initially created as a clone of Bug #1131575 +++ Description of problem: While upgrading Pulp, after updating satellite 6 selinux relabels /var/lib/pulp which if you have there is a lot of packages/channels synced content, this will take a while and appear to make yum frozen. this was tested and yum was stuck at cleaning up for 20 minutes while the selinux relabel package name is pulp-selinux [root@sat6-sysmgmt ~]# rpm -q pulp-selinux --scripts postinstall scriptlet (using /bin/sh): # Enable SELinux re-label process takes hours. While re-labeling it shows policy modules if /usr/sbin/selinuxenabled ; then /usr/share/pulp/selinux/server/enable.sh /usr/share fi # restorcecon wasn't reading new file contexts we added when running under 'post' so moved to 'posttrans' # Spacewalk saw same issue and filed BZ here: https://bugzilla.redhat.com/show_bug.cgi?id=505066 preuninstall scriptlet (using /bin/sh): # Clean up after package removal if [ $1 -eq 0 ]; then /usr/share/pulp/selinux/server/uninstall.sh /usr/share/pulp/selinux/server/relabel.sh fi exit 0 posttrans scriptlet (using /bin/sh): if /usr/sbin/selinuxenabled ; then /usr/share/pulp/selinux/server/relabel.sh /usr/share fi root 16298 0.0 0.0 108340 1768 pts/0 Ss 12:49 0:00 \_ -bash root 16871 1.4 3.3 511444 177364 pts/0 S+ 12:58 0:34 \_ /usr/bin/python /usr/bin/yum update root 17682 0.0 0.0 106096 1288 pts/0 S+ 13:05 0:00 \_ /bin/sh /var/tmp/rpm-tmp.96NFg3 0 root 17684 0.0 0.0 106096 1284 pts/0 S+ 13:05 0:00 \_ /bin/sh /usr/share/pulp/selinux/server/relabel.sh /usr/share root 17691 10.4 2.4 140584 128816 pts/0 D+ 13:05 3:13 \_ /sbin/restorecon -i -R /var/lib/pulp --- Additional comment from RHEL Product and Program Management on 2014-08-19 11:33:16 EDT --- Since this issue was entered in Red Hat Bugzilla, the release flag has been set to ? to ensure that it is installing properly evaluated for this release. --- Additional comment from RHEL Product and Program Management on 2014-08-19 11:34:41 EDT --- Since this issue was entered in Red Hat Bugzilla, the pulp-selinux RPM. The relabel pm_ack has been set to + automatically for the next planned release --- Additional comment from Mike McCune on 2014-08-31 22:11:27 EDT --- DOCS: Users should note that yum update of /var/lib/pulp takes Satellite pulp and other packages may involve a SELinux re-label process which may take a long time with content. This isn't necessary since pulp 2.4 and many earlier versions already have to complete (beyond 1 hour). Users should continue to wait while the correct labels re-label takes place. --- Additional comment from Athene Chan on /var/lib/pulp. 2014-09-04 01:57:48 EDT --- I expect an upgrade of Pulp to only perform restorecon statements if they are actually needed. Release Note Added: http://docbuilder.usersys.redhat.com/22905/#Packaging + This bug was cloned from "Bugzilla Bug #1145720":https://bugzilla.redhat.com/show_bug.cgi?id=1145720 +
.