kola: rawhide: kdump.crash test failing with selinux enabled

[aaradhak]

The kdump.service seem to fai in the ext.config.kdump.crash test with selinux enabled.

[2023-09-01T13:03:00.892Z] --- FAIL: ext.config.kdump.crash (45.44s)
[2023-09-01T13:03:00.892Z]         cluster.go:162: Error: Unit kola-runext.service exited with code 1
[2023-09-01T13:03:00.892Z]         cluster.go:162: 2023-09-01T13:02:55Z cli: Unit kola-runext.service exited with code 1
[2023-09-01T13:03:00.892Z]         harness.go:1233: kolet failed: : kolet run-test-unit failed: Process exited with status 1
[2023-09-01T13:03:00.892Z] FAIL, output in /home/jenkins/agent/workspace/build/tmp/kola-TxDfS/kola/rerun
[2023-09-01T13:03:00.892Z] Error: harness: test suite failed
[2023-09-01T13:03:00.892Z] 2023-09-01T13:02:58Z cli: harness: test suite failed
[2023-09-01T13:03:00.892Z] failed to execute cmd-kola: exit status 1 

From the journal log, we can see that the kdump.service start to fail because of a avc denial:

 Aug 31 12:56:34.925329 kernel: audit: type=1400 audit(1693486594.923:5): avc:  denied  { write } for  pid=5538 comm="kexec" path=2F6D656D66643A6B65726E656C202864656C6574656429 dev="tmpfs" ino=8 scontext=system_u:system_r:kdump_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file permissive=0
Aug 31 12:56:34.928341 kdump.service[1360]: kdump: kexec: failed to load kdump kernel
Aug 31 12:56:34.928341 kdump.service[1360]: kdump: Starting kdump: [FAILED]
Aug 31 12:56:34.930701 init.scope[1]: kdump.service: Main process exited, code=exited, status=1/FAILURE
Aug 31 12:56:34.931202 init.scope[1]: kdump.service: Failed with result 'exit-code'.
Aug 31 12:56:34.934342 init.scope[1]: Failed to start kdump.service - Crash recovery kernel arming.
Aug 31 12:56:34.938215 init.scope[1]: Startup finished in 1.124s (kernel) + 4.497s (initrd) + 28.538s (userspace) = 34.160s.
Aug 31 12:56:34.938342 init.scope[1]: kdump.service: Consumed 19.389s CPU time.
Aug 31 12:56:35.462584 kola-runext.service[4943]: + for _x in {0..60}

Setting enforcing=0 on the kernel command line, the kdump.crash test seem to PASS. Looks like SELinux is preventing kdump.crash from operation.

This issue is found to occur in the latest rawhide x86_64 build

[aaradhak]

The kdump.crash test was earlier waiting on kexec-tools 2.0.27 release.
Note: kexec-tools-2.0.27-1.fc40 pkg is included in this current build. The SELinux issue is found to occur after this.

[aaradhak]

Opened a BZ for this issue.

[dustymabe]

Opened a BZ for this issue.

The BZ has been marked as fixed.

[dustymabe]

Since this test is running and passing on next-devel/next (F39 based) and soon our other production streams will be rebased to F39 I'll close out this issue.