make tools "error: getting status of shell.nix: Permission denied"

[JamesPGriffith]

Describe the bug

Unable to execute 'make tools'.

• I have read the document

To reproduce

Steps to reproduce the behavior:

1. Follow documentation to make tools
2. Observe error error: getting status of shell.nix: Permission denied
3. attempt to run the tools command manually
4. See error -bash: shell: command not found

Expected behavior

Build the tools container environment

Screenshots

Meh, it's all txt at this point...

Additional context

Add any other context about the problem here (hardware, OS, etc.).

Hardware

[user@lenovo-w530-b homelab]$ neofetch
             .',;::::;,'.
         .';:cccccccccccc:;,.            user@lenovo-w530-b
      .;cccccccccccccccccccccc;.         -------------------
    .:cccccccccccccccccccccccccc:.       OS: Fedora Linux 36 (Server Edition) x86_64
  .;ccccccccccccc;.:dddl:.;ccccccc;.     Host: 2447AC4 ThinkPad W530
 .:ccccccccccccc;OWMKOOXMWd;ccccccc:.    Kernel: 5.19.10-200.fc36.x86_64
.:ccccccccccccc;KMMc;cc;xMMc:ccccccc:.   Uptime: 1 hour
,cccccccccccccc;MMM.;cc;;WW::cccccccc,   Packages: 1048 (rpm)
:cccccccccccccc;MMM.;cccccccccccccccc:   Shell: bash 5.1.16
:ccccccc;oxOOOo;MMM0OOk.;cccccccccccc:   Resolution: 1600x900
cccccc:0MMKxdd:;MMMkddc.;cccccccccccc;   Terminal: /dev/pts/0
ccccc:XM0';cccc;MMM.;cccccccccccccccc'   CPU: Intel i7-3740QM (8) @ 3.700GHz
ccccc;MMo;ccccc;MMW.;ccccccccccccccc;    GPU: NVIDIA Quadro K1000M
ccccc;0MNc.ccc.xMMd:ccccccccccccccc;     GPU: Intel 3rd Gen Core processor Graphics Controller
cccccc;dNMWXXXWM0::cccccccccccccc:,      Memory: 466MiB / 15814MiB
cccccccc;.:odl:.;cccccccccccccc:,.
:cccccccccccccccccccccccccccc:'.                                 
.:cccccccccccccccccccccc:;,..                                    
  '::cccccccccccccc::;,.


[user@lenovo-w530-b homelab]$

OS Details

As the nodes will be provisioned with Fedora, I chose Fedora for the Initial controller for consistency. Even the same version.

[user@lenovo-w530-b homelab]$ cat /etc/os-release
NAME="Fedora Linux"
VERSION="36 (Server Edition)"
ID=fedora
VERSION_ID=36
VERSION_CODENAME=""
PLATFORM_ID="platform:f36"
PRETTY_NAME="Fedora Linux 36 (Server Edition)"
ANSI_COLOR="0;38;2;60;110;180"
LOGO=fedora-logo-icon
CPE_NAME="cpe:/o:fedoraproject:fedora:36"
HOME_URL="https://fedoraproject.org/"
DOCUMENTATION_URL="https://docs.fedoraproject.org/en-US/fedora/f36/system-administrators-guide/"
SUPPORT_URL="https://ask.fedoraproject.org/"
BUG_REPORT_URL="https://bugzilla.redhat.com/"
REDHAT_BUGZILLA_PRODUCT="Fedora"
REDHAT_BUGZILLA_PRODUCT_VERSION=36
REDHAT_SUPPORT_PRODUCT="Fedora"
REDHAT_SUPPORT_PRODUCT_VERSION=36
PRIVACY_POLICY_URL="https://fedoraproject.org/wiki/Legal:PrivacyPolicy"
VARIANT="Server Edition"
VARIANT_ID=server
[user@lenovo-w530-b homelab]$

user and groups

[user@lenovo-w530-b homelab]$ id
uid=1000(user) gid=1000(user) groups=1000(user),10(wheel),984(docker) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
[user@lenovo-w530-b homelab]$

Original error

[user@lenovo-w530-b homelab]$ make tools
error: getting status of shell.nix: Permission denied
make: *** [Makefile:30: tools] Error 1
[user@lenovo-w530-b homelab]$

SELinux

I honestly think this is it...

[user@lenovo-w530-b homelab]$ sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   enforcing
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Memory protection checking:     actual (secure)
Max kernel policy version:      33
[user@lenovo-w530-b homelab]$

[JamesPGriffith]

That was it!
https://docs.fedoraproject.org/en-US/quick-docs/changing-selinux-states-and-modes/
Set to permissive, reboot, and BOOM! make tools is running. Even though that was my suspicion I wanted to post the issue for others. 😄

[khuedoan]

Thank you! Do you want to create a PR to update the documentation? Somewhere around here:

homelab/docs/installation/production/prerequisites.md

Lines 26 to 29 in 5071183

	The initial controller is the machine used to bootstrap the cluster, we only need it once, you can use your laptop or desktop
	- A Linux machine that can run Docker (because the `host` networking driver used for PXE boot [only supports Linux](https://docs.docker.com/network/host/), you can use a Linux virtual machine with bridged networking if you're on macOS or Windows).

(Also feel free to add yourself in the contributor list)

[JamesPGriffith]

Sorry for the delay. I would love to do this! I've been looking for little ways to learn how to contribute via GitHub. And thank you for the guidance of where to contribute this.

[khuedoan]

No problem! If you're not familiar with patch submission from a customized fork, you can follow the instructions here.