From jim at meyering.net Tue Dec 1 09:20:51 2009 From: jim at meyering.net (Jim Meyering) Date: Tue, 01 Dec 2009 10:20:51 +0100 Subject: [Fedora-livecd-list] 3 commits - docs/livecd-iso-to-disk.pod tools/livecd-iso-to-disk.sh In-Reply-To: <20091123033324.0FA7E12030A@lists.fedorahosted.org> ("Warren Togami =?utf-8?B?56Cl5LiK5YuHIidz?= message of "Mon, 23 Nov 2009 03:33:24 +0000 (UTC)") References: <20091123033324.0FA7E12030A@lists.fedorahosted.org> Message-ID: <87pr6znj7w.fsf@meyering.net> Warren Togami ??? wrote: > docs/livecd-iso-to-disk.pod | 8 ++++++-- > tools/livecd-iso-to-disk.sh | 10 +++++----- > 2 files changed, 11 insertions(+), 7 deletions(-) > > New commits: > commit e22eee657156d205c10ddbc93afdb006d8152b97 > Author: Bernie Innocenti > Date: Sun Nov 22 22:31:23 2009 -0500 > > LANG=C when parted output is being scraped, as localized strings cause it to fail. Hi Bernie, Please use LC_ALL=C for this sort of thing, not LANG=C, since LC_ALL trumps all other envvars, including LANG. For example, $ LC_ALL=fr_FR.UTF-8 LANG=C /bin/cat no-such /bin/cat: no-such: Aucun fichier ou dossier de ce type > diff --git a/tools/livecd-iso-to-disk.sh b/tools/livecd-iso-to-disk.sh ... > - partinfo=$(/sbin/parted --script -m $device "unit b print" |grep ^$device:) > + partinfo=$(LANG=C /sbin/parted --script -m $device "unit b print" |grep ^$device:) >From fc8b39c586b5f88440ebb78acc64b6a40807ba64 Mon Sep 17 00:00:00 2001 From: Jim Meyering Date: Tue, 1 Dec 2009 10:19:10 +0100 Subject: [PATCH] livecd-iso-to-disk.sh: use LC_ALL=C, not LANG=C, since... * tools/livecd-iso-to-disk.sh: ...LC_ALL trumps all other envvars, including LANG. For example, $ LC_ALL=fr_FR.UTF-8 LANG=C /bin/cat no-such /bin/cat: no-such: Aucun fichier ou dossier de ce type --- tools/livecd-iso-to-disk.sh | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/tools/livecd-iso-to-disk.sh b/tools/livecd-iso-to-disk.sh index 95ca158..3a4726d 100755 --- a/tools/livecd-iso-to-disk.sh +++ b/tools/livecd-iso-to-disk.sh @@ -147,7 +147,7 @@ createGPTLayout() { read umount ${device}? &> /dev/null /sbin/parted --script $device mklabel gpt - partinfo=$(LANG=C /sbin/parted --script -m $device "unit b print" |grep ^$device:) + partinfo=$(LC_ALL=C /sbin/parted --script -m $device "unit b print" |grep ^$device:) size=$(echo $partinfo |cut -d : -f 2 |sed -e 's/B$//') /sbin/parted --script $device unit b mkpart '"EFI System Partition"' fat32 17408 $(($size - 17408)) set 1 boot on USBDEV=${device}1 @@ -169,7 +169,7 @@ createMSDOSLayout() { read umount ${device}? &> /dev/null /sbin/parted --script $device mklabel msdos - partinfo=$(LANG=C /sbin/parted --script -m $device "unit b print" |grep ^$device:) + partinfo=$(LC_ALL=C /sbin/parted --script -m $device "unit b print" |grep ^$device:) size=$(echo $partinfo |cut -d : -f 2 |sed -e 's/B$//') /sbin/parted --script $device unit b mkpart primary fat32 17408 $(($size - 17408)) set 1 boot on USBDEV=${device}1 @@ -192,7 +192,7 @@ checkGPT() { exitclean fi - partinfo=$(LANG=C /sbin/parted --script -m $device "print" |grep ^$partnum:) + partinfo=$(LC_ALL=C /sbin/parted --script -m $device "print" |grep ^$partnum:) volname=$(echo $partinfo |cut -d : -f 6) flags=$(echo $partinfo |cut -d : -f 7) if [ "$volname" != "EFI System Partition" ]; then -- 1.6.6.rc0.324.gb5bf2 From traxtopel at gmail.com Tue Dec 1 11:59:54 2009 From: traxtopel at gmail.com (Grant Williamson) Date: Tue, 01 Dec 2009 12:59:54 +0100 Subject: [Fedora-livecd-list] LiveUSB Security Updates Only Message-ID: <4B15053A.50803@gmail.com> Is there a simple way to set the default on a Live USB install to only install Security updates. I know using the yum-plugin-security and yum update --security is one way, however for Joe Average is there anyway to set this as a yum default, so that even a yum update and or PackageKit will not prompt for additional updates? From bruno at wolff.to Wed Dec 9 01:11:02 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Tue, 8 Dec 2009 19:11:02 -0600 Subject: [Fedora-livecd-list] lzma + squashfs should be easy to use in livecd-tools Message-ID: <20091209011102.GA18519@wolff.to> Phillip Lougher posted lmza+squashfs patches to lkml yesterday and today as a followup he posted a message indicating how to build / use the new sqaushfs-tools to build or read squashfs file systems. (http://marc.info/?l=linux-embedded&m=126029628723357&w=2) The short description is that to use lzma compression when building squashfs images you add a -comp lzma option and that when reading squashfs file systems the type of compression is automatically detected and no special action is needed. If it is desired to have a single version of livecd-creator that works regardless of whether or not mksquashfs supports lzma, it is possible to run mksquashfs without any arguments and examine the output to see if lzma is supported. It may also be necessary to check for a minimum kernel being used for livecd image if livecd-creator is supposed to be able to compose older versions of Fedora. While I don't think I'd call this a "feature", I'd like to have something testable by feature freeze and am willing to do some work to make this happen. From katzj at fedoraproject.org Wed Dec 9 01:45:48 2009 From: katzj at fedoraproject.org (Jeremy Katz) Date: Tue, 8 Dec 2009 20:45:48 -0500 Subject: [Fedora-livecd-list] lzma + squashfs should be easy to use in livecd-tools In-Reply-To: <20091209011102.GA18519@wolff.to> References: <20091209011102.GA18519@wolff.to> Message-ID: <71b2a8b80912081745k41e8bbb4i26d2625a887f5f43@mail.gmail.com> On Tue, Dec 8, 2009 at 8:11 PM, Bruno Wolff III wrote: > Phillip Lougher posted lmza+squashfs patches to lkml yesterday and today > as a followup he posted a message indicating how to build / use the new > sqaushfs-tools to build or read squashfs file systems. > (http://marc.info/?l=linux-embedded&m=126029628723357&w=2) [snip] > If it is desired to have a single version of livecd-creator that works > regardless of whether or not mksquashfs supports lzma, it is possible to > run mksquashfs without any arguments and examine the output to see if > lzma is supported. It may also be necessary to check for a minimum kernel > being used for livecd image if livecd-creator is supposed to be able to compose > older versions of Fedora. While one version is better, we continue to end up being a little hosed by squashfs changes here so I probably wouldn't end up being too concerned by it :/ Checking kernel versions is kind of crummy as an answer given the propensity towards things like patching kernels, etc. The biggest question as far as whether or not it's feasible for F13 in my mind really is whether or not the code gets accepted upstream. The progress of squashfs patches into the kernel has historically not been very fast there. - Jeremy From bruno at wolff.to Wed Dec 9 02:04:55 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Tue, 8 Dec 2009 20:04:55 -0600 Subject: [Fedora-livecd-list] lzma + squashfs should be easy to use in livecd-tools In-Reply-To: <71b2a8b80912081745k41e8bbb4i26d2625a887f5f43@mail.gmail.com> References: <20091209011102.GA18519@wolff.to> <71b2a8b80912081745k41e8bbb4i26d2625a887f5f43@mail.gmail.com> Message-ID: <20091209020455.GA15871@wolff.to> On Tue, Dec 08, 2009 at 20:45:48 -0500, Jeremy Katz wrote: > > The biggest question as far as whether or not it's feasible for F13 in > my mind really is whether or not the code gets accepted upstream. The > progress of squashfs patches into the kernel has historically not been > very fast there. So far the comments don't seem too bad, though I probably haven't read them all. We'll probably know within a week if the process is going to be smooth or not. I am going to take a look at building the updated squashfs locally by the end of the weekend. (Maybe yet tonight.) If the patches get accepted, I'd like to get the new squashfs-tools into rawhide. (I have asked Kyle for commit access for squashfs-tools, but haven't heard back yet.) I can also look at a minimal patch set for livecd-tools so I can be ready to test that right away if we get a kernel with the patches. I'd like to have a pretty good idea about whether or not this is going to work for F13 by the end of New Years weekend, so that the Spin owners can commit to using extra space fairly safely if they desire with some time before feature freeze. (Though the Games Spin is the one most likely to take advantage of this.) Any safety checks or command line option additions should probably be done by freature freeze so that they are ready for the alpha builds. I don't think they are necessary to have for feasibility testing. From bruno at wolff.to Wed Dec 9 17:13:56 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Wed, 9 Dec 2009 11:13:56 -0600 Subject: [Fedora-livecd-list] lzma + squashfs should be easy to use in livecd-tools In-Reply-To: <20091209020455.GA15871@wolff.to> References: <20091209011102.GA18519@wolff.to> <71b2a8b80912081745k41e8bbb4i26d2625a887f5f43@mail.gmail.com> <20091209020455.GA15871@wolff.to> Message-ID: <20091209171356.GA16402@wolff.to> On Tue, Dec 08, 2009 at 20:04:55 -0600, Bruno Wolff III wrote: > > I am going to take a look at building the updated squashfs locally by the end > of the weekend. (Maybe yet tonight.) If the patches get accepted, I'd like > to get the new squashfs-tools into rawhide. (I have asked Kyle for commit > access for squashfs-tools, but haven't heard back yet.) Kyle is going to let me work on squashfs-tools. Assuming initial testing doesn't turn up significant problems, I'll try to have a 4.1 prerelease in rawhide by the end of the weekend. livecd-creator testing will need to wait until there is a 2.6.33 kernel with Lougher's patches in rawhide. Though I probably start looking at before then if the kernel changes move slowly. From bruno at wolff.to Fri Dec 11 20:08:09 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Fri, 11 Dec 2009 14:08:09 -0600 Subject: [Fedora-livecd-list] lzma + squashfs should be easy to use in livecd-tools In-Reply-To: <20091209171356.GA16402@wolff.to> References: <20091209011102.GA18519@wolff.to> <71b2a8b80912081745k41e8bbb4i26d2625a887f5f43@mail.gmail.com> <20091209020455.GA15871@wolff.to> <20091209171356.GA16402@wolff.to> Message-ID: <20091211200809.GB4667@wolff.to> On Wed, Dec 09, 2009 at 11:13:56 -0600, Bruno Wolff III wrote: > Kyle is going to let me work on squashfs-tools. Assuming initial testing > doesn't turn up significant problems, I'll try to have a 4.1 prerelease in > rawhide by the end of the weekend. Depending on the outage timing, I may not actually get an update into rawhide, but will at least be doing local testing. I have also written up a feature proposal page. It's not guaranteed to end up being an official feature, but based on FESCO feedback it seemed worthwhile proposing it as a feature. The formal proposal will wait until I know Lougher's patches are accepted. Lougher has posted a revision of his patches to lkml based on earlier feedback to the origonal version. From bruno at wolff.to Sat Dec 12 14:52:56 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Sat, 12 Dec 2009 08:52:56 -0600 Subject: [Fedora-livecd-list] livecd enforcing mode issue Message-ID: <20091212145256.GA25020@wolff.to> In F12 (at least) it looks like selinux is denying livecd-creator from changing the root password of the image. I'll file a bug on this when infrastructure is back up. Here is the audit record: audit.log.1:type=USER_CHAUTHTOK msg=audit(1260601250.607:153622): user pid=17278 uid=0 auid=500 ses=26 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=change password id=0 exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/1 res=failed' Here is the message printed by livecd-creator: passwd: unconfined_u:unconfined_r:livecd_t:s0-s0:c0.c1023 is not authorized to change the password of root This is with targeted policy 3.6.32-56.fc12. From bruno at wolff.to Sat Dec 12 15:48:45 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Sat, 12 Dec 2009 09:48:45 -0600 Subject: [Fedora-livecd-list] livecd enforcing mode issue In-Reply-To: <20091212145256.GA25020@wolff.to> References: <20091212145256.GA25020@wolff.to> Message-ID: <20091212154845.GA18807@wolff.to> This was already in bug 538496. I added the audit entry and copied Dan on the bug, since it is likely there should end up being a policy change to allow this. From Vasilis.Vlachoudis at cern.ch Tue Dec 15 12:32:22 2009 From: Vasilis.Vlachoudis at cern.ch (Vasilis Vlachoudis) Date: Tue, 15 Dec 2009 13:32:22 +0100 Subject: [Fedora-livecd-list] Persistent root / filesystem Message-ID: <4B2781D6.4000100@cern.ch> Hi all, I have remastered the Fedora Live CD to run through Virtual Box and to mount automatically the ext3 virtual partitions. My problem is, when I install an additional package or modify a file from the root filesystem, the changes are not persistent. Is there a way to make them persistent, something like unionfs with a partition of the virtual disks? Thanks in advance Vasilis From bruno at wolff.to Tue Dec 15 16:45:44 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Tue, 15 Dec 2009 10:45:44 -0600 Subject: [Fedora-livecd-list] Persistent root / filesystem In-Reply-To: <4B2781D6.4000100@cern.ch> References: <4B2781D6.4000100@cern.ch> Message-ID: <20091215164544.GB4063@wolff.to> On Tue, Dec 15, 2009 at 13:32:22 +0100, Vasilis Vlachoudis wrote: > Hi all, > > I have remastered the Fedora Live CD to run through Virtual Box and > to mount automatically the ext3 virtual partitions. My problem is, > when I install an additional package or modify a file from the root > filesystem, the changes are not persistent. Is there a way to make > them persistent, something like unionfs with a partition of the > virtual disks? There is a way to do this on USB live images. Doing this on a cd or dvd is going to be harder and isn't supported anywhere I know of. (There may be a problem with peristence on F12 as I was just playing with that and there was a problem during the boot process. I haven't double checked this yet, so it might just be user error.) From apevec at gmail.com Wed Dec 16 05:03:56 2009 From: apevec at gmail.com (Alan Pevec) Date: Wed, 16 Dec 2009 06:03:56 +0100 Subject: [Fedora-livecd-list] Re: Unnecessary SELinux Failure Condition? In-Reply-To: <2be7262f0911251512h607eb429g8dfa107d8d78ab6c@mail.gmail.com> References: <4AAAB77E.2060803@redhat.com> <4AAAB816.3040807@redhat.com> <4AB3988B.20802@redhat.com> <71b2a8b80909242028w2c5576b0w937d9eb9aa73fbd0@mail.gmail.com> <4ABCBEBB.2040000@redhat.com> <71b2a8b80909251058q1e9675fbn911ee050fe21e298@mail.gmail.com> <4AC263C5.2040305@redhat.com> <4AE0D1C7.5040001@redhat.com> <2be7262f0911251512h607eb429g8dfa107d8d78ab6c@mail.gmail.com> Message-ID: <2be7262f0912152103j21a30727se87d5a34340593a9@mail.gmail.com> I've just found one issue with the patch: @@ -722,7 +714,6 @@ class ImageCreator(object): kickstart.KeyboardConfig(self._instroot).apply(ksh.keyboard) kickstart.TimezoneConfig(self._instroot).apply(ksh.timezone) kickstart.AuthConfig(self._instroot).apply(ksh.authconfig) - kickstart.SelinuxConfig(self._instroot).apply(ksh.selinux) kickstart.FirewallConfig(self._instroot).apply(ksh.firewall) kickstart.RootPasswordConfig(self._instroot).apply(ksh.rootpw) kickstart.ServicesConfig(self._instroot).apply(ksh.services) @@ -734,6 +725,9 @@ class ImageCreator(object): self.__run_post_scripts() + # selinux should always come last + kickstart.SelinuxConfig(self._instroot).apply(ksh.selinux) + def launch_shell(self): """Launch a shell in the install root. This reverts http://git.fedorahosted.org/git/?p=livecd;a=commitdiff;h=d8c25944dde2de95a38c08fbb8e890295290ab21 Other issue is that pykickstart "selinux" command doesn't have --type option to specify the policy and lokkit. assumes "targeted" if --selinuxtype= is not specified. SelinuxConfig should not touch SELINUXTYPE already set in /etc/selinux/config by %post script. To avoid lokkit side-effects, I'll amend the patch to use Augeas to modify /etc/selinux/config Alan -------------- next part -------------- An HTML attachment was scrubbed... URL: From jasper.hartline at gmail.com Wed Dec 16 09:30:11 2009 From: jasper.hartline at gmail.com (Jasper Hartline) Date: Wed, 16 Dec 2009 02:30:11 -0700 Subject: [Fedora-livecd-list] F12 DVD doesn't have anaconda-runtime Message-ID: When using livecd-tools and a mounted DVD of F12 as a repository in my kickstart file livecd-creator dies when anaconda-runtime is not found. Is there a reason for this? How will I use a F12 DVD as a repository to eliminate using the network as a repository source when anaconda-runtime isn't found on the DVD that is being used? Thanks. -------------- next part -------------- An HTML attachment was scrubbed... URL: From kanarip at kanarip.com Wed Dec 16 08:32:26 2009 From: kanarip at kanarip.com (Jeroen van Meeuwen) Date: Wed, 16 Dec 2009 09:32:26 +0100 Subject: [Fedora-livecd-list] F12 DVD doesn't have anaconda-runtime In-Reply-To: References: Message-ID: <5fea7739ba1191cd93e0f58215685c95@localhost> On Wed, 16 Dec 2009 02:30:11 -0700, Jasper Hartline wrote: > When using livecd-tools and a mounted DVD of F12 as a repository in my > kickstart file > livecd-creator dies when anaconda-runtime is not found. Is there a reason > for this? > How will I use a F12 DVD as a repository to eliminate using the network as > a > repository source > when anaconda-runtime isn't found on the DVD that is being used? > The anaconda compose process for installation media does not require it's dependencies to be in the media payload anymore, as it can now take a set of repository baseurls and mirrorlists and get its dependencies from there. Hence, some or most of the requirements of a compose process are not in the resulting media. -- Jeroen From katzj at fedoraproject.org Wed Dec 16 15:02:05 2009 From: katzj at fedoraproject.org (Jeremy Katz) Date: Wed, 16 Dec 2009 10:02:05 -0500 Subject: [Fedora-livecd-list] Re: Unnecessary SELinux Failure Condition? In-Reply-To: <2be7262f0912152103j21a30727se87d5a34340593a9@mail.gmail.com> References: <4AAAB77E.2060803@redhat.com> <4AAAB816.3040807@redhat.com> <4AB3988B.20802@redhat.com> <71b2a8b80909242028w2c5576b0w937d9eb9aa73fbd0@mail.gmail.com> <4ABCBEBB.2040000@redhat.com> <71b2a8b80909251058q1e9675fbn911ee050fe21e298@mail.gmail.com> <4AC263C5.2040305@redhat.com> <4AE0D1C7.5040001@redhat.com> <2be7262f0911251512h607eb429g8dfa107d8d78ab6c@mail.gmail.com> <2be7262f0912152103j21a30727se87d5a34340593a9@mail.gmail.com> Message-ID: <71b2a8b80912160702y14386cah1f899a6637b48554@mail.gmail.com> On Wed, Dec 16, 2009 at 12:03 AM, Alan Pevec wrote: > I've just found one issue with the patch: > @@ -734,6 +725,9 @@ class ImageCreator(object): > > ???????? self.__run_post_scripts() > > +??????? # selinux should always come last > +??????? kickstart.SelinuxConfig(self._instroot).apply(ksh.selinux) > + > ???? def launch_shell(self): > ???????? """Launch a shell in the install root. NAK. Nothing *EVER* can come after running %post scripts. It breaks one of the very few things that have to always be held true for kickstart scripts that came about after a few years of flip-flopping things around for various reasons that seemed good at the time. > Other issue is that pykickstart "selinux" command doesn't have --type option > to specify the policy and lokkit. assumes "targeted" if > --selinuxtype=? is not specified. SelinuxConfig should not touch > SELINUXTYPE already set in /etc/selinux/config by %post script. > To avoid lokkit side-effects, I'll amend the patch to use Augeas to modify > /etc/selinux/config I'd rather not have a dependency on augeas here. If it's important that people be able to specify the policy type in the kickstart config, then we should push that support in via pykickstart and lokkit, not change to a whole new toolset. - Jeremy From wtogami at fedoraproject.org Wed Dec 16 18:47:36 2009 From: wtogami at fedoraproject.org (=?utf-8?b?V2FycmVuIFRvZ2FtaSDnoKXkuIrli4c=?=) Date: Wed, 16 Dec 2009 18:47:36 +0000 (UTC) Subject: [Fedora-livecd-list] tools/livecd-iso-to-disk.sh Message-ID: <20091216184736.CEDCD12029A@lists.fedorahosted.org> tools/livecd-iso-to-disk.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) New commits: commit 6872def12cb62eeaf17b6f6a8c12a7e0ae29a8cb Author: Jim Meyering Date: Wed Dec 16 13:46:07 2009 -0500 livecd-iso-to-disk.sh: use LC_ALL=C, not LANG=C, since LC_ALL trumps all other envvars, including LANG. For example, $ LC_ALL=fr_FR.UTF-8 LANG=C /bin/cat no-such /bin/cat: no-such: Aucun fichier ou dossier de ce type diff --git a/tools/livecd-iso-to-disk.sh b/tools/livecd-iso-to-disk.sh index 95ca158..3a4726d 100755 --- a/tools/livecd-iso-to-disk.sh +++ b/tools/livecd-iso-to-disk.sh @@ -147,7 +147,7 @@ createGPTLayout() { read umount ${device}? &> /dev/null /sbin/parted --script $device mklabel gpt - partinfo=$(LANG=C /sbin/parted --script -m $device "unit b print" |grep ^$device:) + partinfo=$(LC_ALL=C /sbin/parted --script -m $device "unit b print" |grep ^$device:) size=$(echo $partinfo |cut -d : -f 2 |sed -e 's/B$//') /sbin/parted --script $device unit b mkpart '"EFI System Partition"' fat32 17408 $(($size - 17408)) set 1 boot on USBDEV=${device}1 @@ -169,7 +169,7 @@ createMSDOSLayout() { read umount ${device}? &> /dev/null /sbin/parted --script $device mklabel msdos - partinfo=$(LANG=C /sbin/parted --script -m $device "unit b print" |grep ^$device:) + partinfo=$(LC_ALL=C /sbin/parted --script -m $device "unit b print" |grep ^$device:) size=$(echo $partinfo |cut -d : -f 2 |sed -e 's/B$//') /sbin/parted --script $device unit b mkpart primary fat32 17408 $(($size - 17408)) set 1 boot on USBDEV=${device}1 @@ -192,7 +192,7 @@ checkGPT() { exitclean fi - partinfo=$(LANG=C /sbin/parted --script -m $device "print" |grep ^$partnum:) + partinfo=$(LC_ALL=C /sbin/parted --script -m $device "print" |grep ^$partnum:) volname=$(echo $partinfo |cut -d : -f 6) flags=$(echo $partinfo |cut -d : -f 7) if [ "$volname" != "EFI System Partition" ]; then From jasper.hartline at gmail.com Wed Dec 16 21:54:34 2009 From: jasper.hartline at gmail.com (Jasper Hartline) Date: Wed, 16 Dec 2009 14:54:34 -0700 Subject: [Fedora-livecd-list] F12 DVD doesn't have anaconda-runtime In-Reply-To: <5fea7739ba1191cd93e0f58215685c95@localhost> References: <5fea7739ba1191cd93e0f58215685c95@localhost> Message-ID: Using multiple repo designations in the kickstart file works to satisfy the dependant anaconda-runtime required to build the Live media when using a mounted F12 DVD ISO file locally. It only needed to fetch a few packages from the network using the kickstart file provided with the livecd-tools package. repo --name=local --baseurl=file:///mnt/iso repo --name=network --baseurl= http://mirrors.kernel.org/fedora/releases/12/Everything/i386/os/ -------------- next part -------------- An HTML attachment was scrubbed... URL: From monroe.e.taylor at intel.com Thu Dec 17 18:32:44 2009 From: monroe.e.taylor at intel.com (Taylor, Monroe E) Date: Thu, 17 Dec 2009 11:32:44 -0700 Subject: [Fedora-livecd-list] Cannot select PAE kernel at boot Message-ID: <07B49FCEA8C9C34AB7611048D94670740350A31762@azsmsx504.amr.corp.intel.com> I have created a live image using livecd-creator. The image includes a hardware diagnostic utility in it. Basically I install the image on a USB device and boot the system using the USB device and run the diagnostic utility to capture data then shutdown the system. Now I want to use this to run the diagnostic on servers with > 4GB of memory. I used yum command to install the kernel-PAE.i686 to be able to see > 4GB memory. The install was successful. However, when I rebooted, I was not given the option to select the PAE kernel (which is probably because it is a livecd image?). I booted as normal and checked the /boot directory and it contains the following files -rw-r--r-- 1 root root 90947 2009-06-18 12:57 config-2.6.27.25-78.2.56.fc9.i686 -rw-r--r-- 1 root root 91113 2009-06-18 12:45 config-2.6.27.25-78.2.56.fc9.i686.PAE drwxr-xr-x 3 root root 4096 2009-12-16 19:11 efi -rw-r--r-- 1 root root 118396 2009-04-24 15:29 elf-memtest86+-2.11 drwxr-xr-x 2 root root 4096 2008-04-07 13:32 grub -rw------- 1 root root 2553813 2009-12-17 10:27 initrd-2.6.27.25-78.2.56.fc9.i686.PAE.img -rw-r--r-- 1 root root 116720 2009-04-24 15:29 memtest86+-2.11 -rw-r--r-- 1 root root 976362 2009-06-18 12:57 System.map-2.6.27.25-78.2.56.fc9.i686 -rw-r--r-- 1 root root 993147 2009-06-18 12:45 System.map-2.6.27.25-78.2.56.fc9.i686.PAE -rwxr-xr-x 1 root root 2227280 2009-06-18 12:57 vmlinuz-2.6.27.25-78.2.56.fc9.i686 -rwxr-xr-x 1 root root 2269712 2009-06-18 12:45 vmlinuz-2.6.27.25-78.2.56.fc9.i686.PAE Please note that there was no grub.conf file. Can anyone tell me what I must do in order to boot the PAE kernel from the live USB? This is a critical issue for me so any and all assistance is greatly appreciated. From dsd at laptop.org Sat Dec 19 20:27:18 2009 From: dsd at laptop.org (Daniel Drake) Date: Sat, 19 Dec 2009 20:27:18 +0000 (GMT) Subject: [Fedora-livecd-list] [PATCH] Implement %post --erroronfail Message-ID: <20091219202718.8B0CB9D400D@zog.reactivated.net> I was a bit surprised to find that this flag is documented and parsed, but not acted upon. Am I missing anything? --- imgcreate/creator.py | 10 ++++++++-- 1 files changed, 8 insertions(+), 2 deletions(-) diff --git a/imgcreate/creator.py b/imgcreate/creator.py index 909f616..3324520 100644 --- a/imgcreate/creator.py +++ b/imgcreate/creator.py @@ -23,6 +23,7 @@ import sys import tempfile import shutil import logging +import subprocess import selinux import yum @@ -702,11 +703,16 @@ class ImageCreator(object): script = "/tmp/" + os.path.basename(path) try: - subprocess.call([s.interp, script], - preexec_fn = preexec, env = env) + subprocess.check_call([s.interp, script], + preexec_fn = preexec, env = env) except OSError, (err, msg): raise CreatorError("Failed to execute %%post script " "with '%s' : %s" % (s.interp, msg)) + except subprocess.CalledProcessError, err: + if not s.errorOnFail: + pass + raise CreatorError("%%post script failed with code %d " + % err.returncode) finally: os.unlink(path) -- 1.6.2.5 From katzj at fedoraproject.org Tue Dec 22 03:54:23 2009 From: katzj at fedoraproject.org (Jeremy Katz) Date: Mon, 21 Dec 2009 22:54:23 -0500 Subject: [Fedora-livecd-list] [PATCH] Implement %post --erroronfail In-Reply-To: <20091219202718.8B0CB9D400D@zog.reactivated.net> References: <20091219202718.8B0CB9D400D@zog.reactivated.net> Message-ID: <71b2a8b80912211954i21db2891p3b13111c387bde5f@mail.gmail.com> On Sat, Dec 19, 2009 at 3:27 PM, Daniel Drake wrote: > I was a bit surprised to find that this flag is documented and parsed, but > not acted upon. Am I missing anything? No one ever asked for it :-) Patch looks correct enough, although if we're going to check, it's probably worth at least logging a warning on scriptlet errors if they haven't asked for fail on error. - Jeremy From bruno at wolff.to Tue Dec 22 04:07:23 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Mon, 21 Dec 2009 22:07:23 -0600 Subject: [Fedora-livecd-list] Pointers to live usb using super floppy format Message-ID: <20091222040723.GA28438@wolff.to> I have some older computers that don't seem to be able to boot off of liveusb devcies formatted like hard drives and am looking to see if they will work with ones formatted as superfloppies (no partition table and no MBR). Since the bios' setup options suggest that they will boot off of some usb devices it seems likely this will work. However I am having trouble finding clear instructions on how to turn a live[c/dv]d image into a liveusb image that doesn't use a partioned device. Can someone point me to some reasonable documentation on how to do this? From Marc.Herbert at gmail.com Tue Dec 22 10:29:57 2009 From: Marc.Herbert at gmail.com (Marc Herbert) Date: Tue, 22 Dec 2009 10:29:57 +0000 Subject: [Fedora-livecd-list] Cannot select PAE kernel at boot In-Reply-To: <07B49FCEA8C9C34AB7611048D94670740350A31762@azsmsx504.amr.corp.intel.com> References: <07B49FCEA8C9C34AB7611048D94670740350A31762@azsmsx504.amr.corp.intel.com> Message-ID: Taylor, Monroe E a ?crit : > Please note that there was no grub.conf file. The boot loader used is syslinux. Grub is not used. > I booted as normal and checked the /boot directory and it contains the > following files > > -rwxr-xr-x 1 root root 2227280 2009-06-18 12:57 vmlinuz-2.6.27.25-78.2.56.fc9.i686 > -rwxr-xr-x 1 root root 2269712 2009-06-18 12:45 vmlinuz-2.6.27.25-78.2.56.fc9.i686.PAE This boot directory is located inside the compressed image, so the syslinux bootloader cannot use it. The kernel image in /boot is not used to boot the liveCD. It is used in (at least) two cases: - when you perform a hard drive installation from the running liveCD - at build time, to be copied into syslinux/ (I guess) Searching the list archive for "kernel" will help. See for instance this: http://thread.gmane.org/gmane.linux.redhat.fedora.livecd/3196/ > Can anyone tell me what I must do in order to boot the PAE kernel from > the live USB? This is a critical issue for me so any and all > assistance is greatly appreciated. You can try to move the kernel outside of the compressed image, but I do not promise this will be enough. From the runing liveCD try something like this: yum install kernel-PAE mount -o remount,rw /mnt/live mv /boot/vmlinux-PAE /mnt/live/syslinux/ Then edit syslinux/syslinux.cfg and reboot. And cross fingers. If this does not work, you will have to understand the build process better in order to fine-tune it. The list archive will help. From Marc.Herbert at gmail.com Tue Dec 22 10:50:37 2009 From: Marc.Herbert at gmail.com (Marc Herbert) Date: Tue, 22 Dec 2009 10:50:37 +0000 Subject: [Fedora-livecd-list] Pointers to live usb using super floppy format In-Reply-To: <20091222040723.GA28438@wolff.to> References: <20091222040723.GA28438@wolff.to> Message-ID: Bruno Wolff III a ?crit : > I have some older computers that don't seem to be able to boot off of > liveusb devcies formatted like hard drives and am looking to see if they > will work with ones formatted as superfloppies (no partition table and > no MBR). Since the bios' setup options suggest that they will boot off of > some usb devices it seems likely this will work. > However I am having trouble finding clear instructions on how to turn > a live[c/dv]d image into a liveusb image that doesn't use a partioned device. > Can someone point me to some reasonable documentation on how to do this? Have a look at "makebootfat". Something like this maybe (some details and options skipped for clarity) dd if=/dev/zero of=imagefile loopdevice=$(losetup --show -f imagefile) makebootfat $loopdevice and then give the "$loopdevice" target to livecd-iso-to-disk. If you change your mind and want to mount some partition instead of the whole imagefile: losetup -d $loopdevice loopdevice=$(losetup --show -f -o $partitionoffset $imagefile) From bruno at wolff.to Tue Dec 22 15:47:51 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Tue, 22 Dec 2009 09:47:51 -0600 Subject: [Fedora-livecd-list] Pointers to live usb using super floppy format In-Reply-To: <20091222040723.GA28438@wolff.to> References: <20091222040723.GA28438@wolff.to> Message-ID: <20091222154751.GA27283@wolff.to> On Mon, Dec 21, 2009 at 22:07:23 -0600, Bruno Wolff III wrote: > I have some older computers that don't seem to be able to boot off of > liveusb devcies formatted like hard drives and am looking to see if they > will work with ones formatted as superfloppies (no partition table and > no MBR). Since the bios' setup options suggest that they will boot off of > some usb devices it seems likely this will work. > However I am having trouble finding clear instructions on how to turn > a live[c/dv]d image into a liveusb image that doesn't use a partioned device. > Can someone point me to some reasonable documentation on how to do this? I think the problem may be that the devices are too large and may require extra trickiness. They need FAT32 or FAT16 with very large clusters to make an 8GB file system and I think those features may not be properly supported. The liveusb creation script does use syslinux instead of isolinux when writing to a device that isn't partitioned. I don't know if the problem is a limitation of syslinux or with the bios of the machines. I'm going to be doing some more reading and testing to see if I can figure it out. From dsd at laptop.org Thu Dec 24 11:31:46 2009 From: dsd at laptop.org (Daniel Drake) Date: Thu, 24 Dec 2009 11:31:46 +0000 (GMT) Subject: [Fedora-livecd-list] [PATCH v2] Implement %post --erroronfail Message-ID: <20091224113146.EABF59D400D@zog.reactivated.net> This flag is documented and parsed, but not acted upon. --- imgcreate/creator.py | 11 +++++++++-- 1 files changed, 9 insertions(+), 2 deletions(-) diff --git a/imgcreate/creator.py b/imgcreate/creator.py index 909f616..4deb49e 100644 --- a/imgcreate/creator.py +++ b/imgcreate/creator.py @@ -23,6 +23,7 @@ import sys import tempfile import shutil import logging +import subprocess import selinux import yum @@ -702,11 +703,17 @@ class ImageCreator(object): script = "/tmp/" + os.path.basename(path) try: - subprocess.call([s.interp, script], - preexec_fn = preexec, env = env) + subprocess.check_call([s.interp, script], + preexec_fn = preexec, env = env) except OSError, (err, msg): raise CreatorError("Failed to execute %%post script " "with '%s' : %s" % (s.interp, msg)) + except subprocess.CalledProcessError, err: + if s.errorOnFail: + raise CreatorError("%%post script failed with code %d " + % err.returncode) + logging.warning("ignoring %%post failure (code %d)" + % err.returncode) finally: os.unlink(path) -- 1.6.2.5 From bruno at wolff.to Sat Dec 26 22:39:56 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Sat, 26 Dec 2009 16:39:56 -0600 Subject: [Fedora-livecd-list] Pointers to live usb using super floppy format In-Reply-To: References: <20091222040723.GA28438@wolff.to> Message-ID: <20091226223956.GA18894@wolff.to> On Tue, Dec 22, 2009 at 10:50:37 +0000, Marc Herbert wrote: > > Have a look at "makebootfat". Something like this maybe (some details > and options skipped for clarity) I ended up making superfloppies for the gifts. That didn't work for hp 8200s (though there is a firmware update available). The next time I go over to where those machines are I'll be trying out hdd formatted drives to see if they work. I also had a machine that I ended up allowing booting from usb-zip/ls format which was the only option to work. This seems odd since the devices were not set up with the zip format. I haven't gotten any format to work on my home desktop which has bios settings for booting off hdd devices. I probably won't try the tricky stuff using makebootfat again for a long while, since most of the drives are in other people's hands and for the gaming group, I'll probably just worry about getting them to work on the 8200s and want to do that simply since I don't get a lot of testing opportunity. From abo at root.snowtree.se Sun Dec 27 11:13:32 2009 From: abo at root.snowtree.se (Alexander =?ISO-8859-1?Q?Bostr=F6m?=) Date: Sun, 27 Dec 2009 12:13:32 +0100 Subject: [Fedora-livecd-list] [PATCH] Also call fdisk in C locale to make the output predictable. Message-ID: <1261912412.16688.15.camel@tempo.alexander.bostrom.net> I had to run livecd-iso-to-disk in an English locale to make it accept that the partition really was bootable. This should fix that. --- tools/livecd-iso-to-disk.sh | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/tools/livecd-iso-to-disk.sh b/tools/livecd-iso-to-disk.sh index 3a4726d..f625d2b 100755 --- a/tools/livecd-iso-to-disk.sh +++ b/tools/livecd-iso-to-disk.sh @@ -128,7 +128,7 @@ checkPartActive() { return fi - if [ "$(/sbin/fdisk -l $device 2>/dev/null |grep $dev |awk {'print $2;'})" != "*" ]; then + if [ "$(LC_ALL=C /sbin/fdisk -l $device 2>/dev/null |grep $dev |awk {'print $2;'})" != "*" ]; then echo "Partition isn't marked bootable!" echo "You can mark the partition as bootable with " echo " # /sbin/parted $device" @@ -186,7 +186,7 @@ checkGPT() { dev=$1 getdisk $dev - if [ "$(/sbin/fdisk -l $device 2>/dev/null |grep -c GPT)" -eq "0" ]; then + if [ "$(LC_ALL=C /sbin/fdisk -l $device 2>/dev/null |grep -c GPT)" -eq "0" ]; then echo "EFI boot requires a GPT partition table." echo "This can be done manually or you can run with --format" exitclean -- 1.6.5.2 From abo at root.snowtree.se Sun Dec 27 12:42:55 2009 From: abo at root.snowtree.se (Alexander =?ISO-8859-1?Q?Bostr=F6m?=) Date: Sun, 27 Dec 2009 13:42:55 +0100 Subject: [Fedora-livecd-list] [PATCH] Also call fdisk in C locale to make the output predictable. In-Reply-To: <1261912412.16688.15.camel@tempo.alexander.bostrom.net> References: <1261912412.16688.15.camel@tempo.alexander.bostrom.net> Message-ID: <1261917775.16688.26.camel@tempo.alexander.bostrom.net> Uhm actually no, I don't know what I was doing and thinking. But it might be a good idea to apply it anyway. /abo s?n 2009-12-27 klockan 12:13 +0100 skrev Alexander Bostr?m: > I had to run livecd-iso-to-disk in an English locale to make it accept > that the partition really was bootable. This should fix that. > > --- > tools/livecd-iso-to-disk.sh | 4 ++-- > 1 files changed, 2 insertions(+), 2 deletions(-) > > diff --git a/tools/livecd-iso-to-disk.sh b/tools/livecd-iso-to-disk.sh > index 3a4726d..f625d2b 100755 > --- a/tools/livecd-iso-to-disk.sh > +++ b/tools/livecd-iso-to-disk.sh > @@ -128,7 +128,7 @@ checkPartActive() { > return > fi > > - if [ "$(/sbin/fdisk -l $device 2>/dev/null |grep $dev |awk {'print $2;'})" != "*" ]; then > + if [ "$(LC_ALL=C /sbin/fdisk -l $device 2>/dev/null |grep $dev |awk {'print $2;'})" != "*" ]; then > echo "Partition isn't marked bootable!" > echo "You can mark the partition as bootable with " > echo " # /sbin/parted $device" > @@ -186,7 +186,7 @@ checkGPT() { > dev=$1 > getdisk $dev > > - if [ "$(/sbin/fdisk -l $device 2>/dev/null |grep -c GPT)" -eq "0" ]; then > + if [ "$(LC_ALL=C /sbin/fdisk -l $device 2>/dev/null |grep -c GPT)" -eq "0" ]; then > echo "EFI boot requires a GPT partition table." > echo "This can be done manually or you can run with --format" > exitclean From nirmal.npr at gmail.com Tue Dec 29 14:03:30 2009 From: nirmal.npr at gmail.com (Nirmal A) Date: Tue, 29 Dec 2009 19:33:30 +0530 Subject: [Fedora-livecd-list] Fedora 12 Live CD creation error : Unable to run ['/usr/bin/passwd', '-d', 'root']! Message-ID: <9b79f9940912290603j1aa5a8e9teddc52e80b9e5101@mail.gmail.com> I'm using Fedora 12 and I'm trying to create a liveCD using the following command (logged in as root user) *livecd-creator -c fedora-live-base.ks* Following error is seen. Installing: perl-Digest-SHA1 ####################### [88/91] Installing: perl-Pod-Simple ####################### [89/91] Installing: perl-Crypt-PasswdMD5 ####################### [90/91] Installing: syslinux ####################### [91/91] /usr/lib/python2.6/site-packages/imgcreate/errors.py:45: DeprecationWarning: BaseException.message has been deprecated as of Python 2.6 return unicode(self.message) *Error creating Live CD : Unable to run ['/usr/bin/passwd', '-d', 'root']! *What could be the reason for this error ? Any will help will be appreciated. I'm attaching the ks file with this mail thanks Nirmal* ** * -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: fedora-live-base.ks Type: application/octet-stream Size: 12342 bytes Desc: not available URL: From bruno at wolff.to Tue Dec 29 17:16:13 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Tue, 29 Dec 2009 11:16:13 -0600 Subject: [Fedora-livecd-list] Fedora 12 Live CD creation error : Unable to run ['/usr/bin/passwd', '-d', 'root']! In-Reply-To: <9b79f9940912290603j1aa5a8e9teddc52e80b9e5101@mail.gmail.com> References: <9b79f9940912290603j1aa5a8e9teddc52e80b9e5101@mail.gmail.com> Message-ID: <20091229171613.GA2069@wolff.to> On Tue, Dec 29, 2009 at 19:33:30 +0530, Nirmal A wrote: > I'm using Fedora 12 and I'm trying to create a liveCD using the following > command (logged in as root user) > > *livecd-creator -c fedora-live-base.ks* > > Following error is seen. > > Installing: perl-Digest-SHA1 ####################### [88/91] > Installing: perl-Pod-Simple ####################### [89/91] > Installing: perl-Crypt-PasswdMD5 ####################### [90/91] > Installing: syslinux ####################### [91/91] > > /usr/lib/python2.6/site-packages/imgcreate/errors.py:45: DeprecationWarning: > BaseException.message has been deprecated as of Python 2.6 > return unicode(self.message) > *Error creating Live CD : Unable to run ['/usr/bin/passwd', '-d', 'root']! > > *What could be the reason for this error ? Any will help will be > appreciated. > I'm attaching the ks file with this mail It's probably this bug: https://bugzilla.redhat.com/show_bug.cgi?id=538496 I haven't retested this since getting the selinux-policy update that is supposed to fix it. Do you have selinux-policy-doc-3.6.32-59.fc12 or later installed? It has been in updates since the 24th. From bruno at wolff.to Tue Dec 29 23:47:52 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Tue, 29 Dec 2009 17:47:52 -0600 Subject: [Fedora-livecd-list] Fedora 12 Live CD creation error : Unable to run ['/usr/bin/passwd', '-d', 'root']! In-Reply-To: <20091229171613.GA2069@wolff.to> References: <9b79f9940912290603j1aa5a8e9teddc52e80b9e5101@mail.gmail.com> <20091229171613.GA2069@wolff.to> Message-ID: <20091229234752.GA22235@wolff.to> On Tue, Dec 29, 2009 at 11:16:13 -0600, Bruno Wolff III wrote: > > I haven't retested this since getting the selinux-policy update that > is supposed to fix it. Do you have selinux-policy-doc-3.6.32-59.fc12 > or later installed? It has been in updates since the 24th. One aspect of the problem was fixed but there is a different issue now blocking clearing the root password in the live image. It is still related to selinux, but changing the policy might not be the correct fix. From nirmal.npr at gmail.com Wed Dec 30 11:02:27 2009 From: nirmal.npr at gmail.com (Nirmal A) Date: Wed, 30 Dec 2009 06:02:27 -0500 Subject: [Fedora-livecd-list] Fedora 12 Live CD creation error : Unable to run ['/usr/bin/passwd', '-d', 'root']! In-Reply-To: <20091229234752.GA22235@wolff.to> References: <9b79f9940912290603j1aa5a8e9teddc52e80b9e5101@mail.gmail.com> <20091229171613.GA2069@wolff.to> <20091229234752.GA22235@wolff.to> Message-ID: <9b79f9940912300302n3113340fkac3c8b95fcea0c12@mail.gmail.com> Thanks Bruno. I have selinux-policy-doc-3.6.32-59.fc12 installed but I still get the same error (ie: clearing the root password in the live image fails - Unable to run ['/usr/bin/passwd', '-d', 'root']! I tried setting selinux to permissive mode but same error occurs. Any solution / workaround exist for this ? On Tue, Dec 29, 2009 at 6:47 PM, Bruno Wolff III wrote: > On Tue, Dec 29, 2009 at 11:16:13 -0600, > Bruno Wolff III wrote: > > > > I haven't retested this since getting the selinux-policy update that > > is supposed to fix it. Do you have selinux-policy-doc-3.6.32-59.fc12 > > or later installed? It has been in updates since the 24th. > > One aspect of the problem was fixed but there is a different issue now > blocking clearing the root password in the live image. It is still related > to selinux, but changing the policy might not be the correct fix. > -------------- next part -------------- An HTML attachment was scrubbed... URL: From bruno at wolff.to Wed Dec 30 16:34:34 2009 From: bruno at wolff.to (Bruno Wolff III) Date: Wed, 30 Dec 2009 10:34:34 -0600 Subject: [Fedora-livecd-list] Fedora 12 Live CD creation error : Unable to run ['/usr/bin/passwd', '-d', 'root']! In-Reply-To: <9b79f9940912300302n3113340fkac3c8b95fcea0c12@mail.gmail.com> References: <9b79f9940912290603j1aa5a8e9teddc52e80b9e5101@mail.gmail.com> <20091229171613.GA2069@wolff.to> <20091229234752.GA22235@wolff.to> <9b79f9940912300302n3113340fkac3c8b95fcea0c12@mail.gmail.com> Message-ID: <20091230163434.GB28962@wolff.to> On Wed, Dec 30, 2009 at 06:02:27 -0500, Nirmal A wrote: > Thanks Bruno. > I have selinux-policy-doc-3.6.32-59.fc12 installed but I still get the same > error (ie: clearing the root password in the live image fails - Unable to > run ['/usr/bin/passwd', '-d', 'root']! > > I tried setting selinux to permissive mode but same error occurs. > > Any solution / workaround exist for this ? The work around is to run livecd-creator with the system in permissive mode. I have setenforce commands in the scripts I use to build live images. There will still be AVCs in the logs, but the resulting images should be OK. It looks like there is also an issue with umount trying to update /etc/mtab. That one looks normal. Why /selinux/enforce is getting mislabelled is a separate question that I don't see an obvious answer to. From nirmal.npr at gmail.com Wed Dec 30 17:40:48 2009 From: nirmal.npr at gmail.com (Nirmal A) Date: Wed, 30 Dec 2009 23:10:48 +0530 Subject: [Fedora-livecd-list] Fedora 12 Live CD creation error : Unable to run ['/usr/bin/passwd', '-d', 'root']! In-Reply-To: <20091230163434.GB28962@wolff.to> References: <9b79f9940912290603j1aa5a8e9teddc52e80b9e5101@mail.gmail.com> <20091229171613.GA2069@wolff.to> <20091229234752.GA22235@wolff.to> <9b79f9940912300302n3113340fkac3c8b95fcea0c12@mail.gmail.com> <20091230163434.GB28962@wolff.to> Message-ID: <9b79f9940912300940x2fc099acka61caaf42ed4d3ca@mail.gmail.com> Hi, I'm running the livecd-creator with the system in permissive mode only but still got the error. On Wed, Dec 30, 2009 at 10:04 PM, Bruno Wolff III wrote: > On Wed, Dec 30, 2009 at 06:02:27 -0500, > Nirmal A wrote: > > Thanks Bruno. > > I have selinux-policy-doc-3.6.32-59.fc12 installed but I still get the > same > > error (ie: clearing the root password in the live image fails - Unable > to > > run ['/usr/bin/passwd', '-d', 'root']! > > > > I tried setting selinux to permissive mode but same error occurs. > > > > Any solution / workaround exist for this ? > > The work around is to run livecd-creator with the system in permissive > mode. > I have setenforce commands in the scripts I use to build live images. > There will still be AVCs in the logs, but the resulting images should be > OK. > > It looks like there is also an issue with umount trying to update > /etc/mtab. > That one looks normal. Why /selinux/enforce is getting mislabelled is a > separate question that I don't see an obvious answer to. > -------------- next part -------------- An HTML attachment was scrubbed... URL: