[Spacewalk-list] spacewalk provisioning via koan failure with [Errno 10] No child processes

[Matthew Willsher]

On 4 Apr 2011, at 10:06, Jan Pazdziora wrote:

> On Sat, Apr 02, 2011 at 12:23:59AM +0100, Matt Willsher wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>> 
>> On 31/03/2011 08:48, Matt Willsher wrote:
>>> Hello,
>>> 
>>> I'm trying to a provision a KVM VM on CentOS 5.5 via Spacewalk 1.3, but
>>> I get the following output at which point the installation halts.  The
>>> server onto which I'm trying to provison is also running the a KVM
>>> instance with my spacewalk instance in.
>>> 
>>> The following versions of software are installed on the virtualisation host:
>>> 
>>> python-2.4.3-27.el5_5.3
>>> spacewalk-koan-0.2.16-1.el5
>>> koan-2.0.9-1.el5
>>> 
>>> Thanks,
>>> Matt
>>> 
>>> # rhn_check
>> ...
>>> exceptions.OSError
>>> [Errno 10] No child processes
>>>  File "/usr/share/rhn/spacewalkkoan/spacewalkkoan.py", line 193, in
>>> initiate_guest
>>>    k.run()
>>>   File "/usr/lib/python2.4/site-packages/koan/app.py", line 356, in run
>>>    self.virt()
>>>   File "/usr/lib/python2.4/site-packages/koan/app.py", line 675, in virt
>>>    return self.net_install(after_download)
>>>   File "/usr/lib/python2.4/site-packages/koan/app.py", line 594, in
>>> net_install
>>>    after_download(self, profile_data)
>>>   File "/usr/lib/python2.4/site-packages/koan/app.py", line 673, in
>>> after_download
>>>    self.virt_net_install(profile_data)
>>>   File "/usr/lib/python2.4/site-packages/koan/app.py", line 1138, in
>>> virt_net_install
>>>    path_list           = self.calc_virt_path(pd, virtname)
>>>   File "/usr/lib/python2.4/site-packages/koan/app.py", line 1434, in
>>> calc_virt_path
>>>    path =
>>> self.calc_virt_path2(pd,name,offset=count,location=x,sizes=virt_sizes)
>>>   File "/usr/lib/python2.4/site-packages/koan/app.py", line 1535, in
>>> calc_virt_path2
>>>    change_context |= sub_process.call(args, close_fds=True, shell=True)
>>>   File "/usr/lib64/python2.4/subprocess.py", line 419, in call
>>>    return Popen(*args, **kwargs).wait()
>>>   File "/usr/lib64/python2.4/subprocess.py", line 1027, in wait
>>>    pid, sts = os.waitpid(self.pid, 0)
>> 
>> 
>> This turned out to be something in SELinux blocking part of the process.
>> Running koan from the command line directly worked fine just not when
>> called from Spacewalk. I've put SELinux in permissive mode for now and
>> provisioning is now ok.
> 
> Could you post the output of
> 
> 	grep AVC /var/log/audit/audit.log
> 
> ?

Filtering off before I switched to passive rather than enforcing and  excluding policyload messages:

type=AVC msg=audit(1301556179.132:4612): avc:  denied  { sigchld } for  pid=9313 comm="rhn_check" scontext=root:system_r:semanage_t:s0-s0:c0.c1023 tcontext=root:system_r:rpm_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1301556179.973:4613): avc:  denied  { sigchld } for  pid=9313 comm="rhn_check" scontext=root:system_r:semanage_t:s0-s0:c0.c1023 tcontext=root:system_r:rpm_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1301556395.758:4630): avc:  denied  { sigchld } for  pid=9367 comm="rhn_check" scontext=root:system_r:semanage_t:s0-s0:c0.c1023 tcontext=root:system_r:rpm_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1301556396.556:4631): avc:  denied  { sigchld } for  pid=9367 comm="rhn_check" scontext=root:system_r:semanage_t:s0-s0:c0.c1023 tcontext=root:system_r:rpm_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1301582028.239:6099): avc:  denied  { sigchld } for  pid=30264 comm="rhn_check" scontext=root:system_r:semanage_t:s0-s0:c0.c1023 tcontext=root:system_r:rpm_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1301582035.674:6102): avc:  denied  { sigchld } for  pid=30264 comm="rhn_check" scontext=root:system_r:semanage_t:s0-s0:c0.c1023 tcontext=root:system_r:rpm_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1301610222.647:7599): avc:  denied  { sigchld } for  pid=594 comm="rhn_check" scontext=root:system_r:semanage_t:s0-s0:c0.c1023 tcontext=root:system_r:rpm_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1301610225.293:7600): avc:  denied  { sigchld } for  pid=594 comm="rhn_check" scontext=root:system_r:semanage_t:s0-s0:c0.c1023 tcontext=root:system_r:rpm_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1301611315.875:56): avc:  denied  { sigchld } for  pid=3176 comm="rhn_check" scontext=root:system_r:semanage_t:s0-s0:c0.c1023 tcontext=root:system_r:rpm_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1301611320.455:57): avc:  denied  { sigchld } for  pid=3176 comm="rhn_check" scontext=root:system_r:semanage_t:s0-s0:c0.c1023 tcontext=root:system_r:rpm_t:s0-s0:c0.c1023 tclass=process