Wind River Support Network

HomeDefectsLINCD-1191
Fixed

LINCD-1191 : ostree_cgl: There are two permission denied for executing system-export cmd

Created: Feb 21, 2020    Updated: Mar 19, 2020
Resolved Date: Mar 6, 2020
Found In Version: 10.20.9.0
Fix Version: 10.20.12.0
Severity: Standard
Applicable for: Wind River Linux CD
Component/s: Userspace

Description

root@intel-x86-64:~# cd /var/
root@intel-x86-64:/var# system-export
tar: /usr/etc/gshadow: Cannot open: Permission denied          ] 55% ETA 0:00:26
tar: /usr/etc/shadow: Cannot open: Permission denied
tar: Exiting with failure status due to previous errors======>] 101% ETA 0:00:00
1.42GiB 0:00:52 [27.8MiB/s] [================================>] 102%
The system had been exported to ./wrlinux-image-cgl.tar.gz
root@intel-x86-64:/var#
root@intel-x86-64:/var# rpm -qf `which system-export`
ostree-2019.1+git0+6649032a37-r0.corei7_64
root@intel-x86-64:/var# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             wr-mls
Current mode:                   enforcing
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Memory protection checking:     requested (insecure)
Max kernel policy version:      31
root@intel-x86-64:/var#

More debug info:

root@intel-x86-64:/var#
root@intel-x86-64:/var# bash -x system-export
+ SYSROOT_TARBALL=
+ SYSROOT=
+ get_ref
+ count=0
++ mktemp /tmp/tmp.XXXXXXXXXX
+ logfile=/tmp/tmp.3wJzZFVRuo
+ ostree admin status
+ sed 's/\*/\\\\\*/'
+ read fileline
+ echo '\*' wrlinux fc336a697aa3e0055bd8ad442853c8c6853f6ac4c1eb33ee48e58b7ba26575f1.0
+ grep '\*'
+ '[' 0 == 0 ']'
++ echo '\*' wrlinux fc336a697aa3e0055bd8ad442853c8c6853f6ac4c1eb33ee48e58b7ba26575f1.0
++ awk '{print "/ostree/deploy/"$2"/deploy/"$3}'
+ SYSROOT=/ostree/deploy/wrlinux/deploy/fc336a697aa3e0055bd8ad442853c8c6853f6ac4c1eb33ee48e58b7ba26575f1.0
+ count=1
+ '[' 1 == 1 ']'
+ echo '\*' wrlinux fc336a697aa3e0055bd8ad442853c8c6853f6ac4c1eb33ee48e58b7ba26575f1.0
+ grep ' *origin refspec'
+ '[' 1 == 0 ']'
+ read fileline
+ echo origin refspec: wrlinux-image-cgl
+ grep '\*'
+ '[' 1 == 0 ']'
+ '[' 1 == 1 ']'
+ echo origin refspec: wrlinux-image-cgl
+ grep ' *origin refspec'
+ '[' 0 == 0 ']'
++ echo origin refspec: wrlinux-image-cgl
++ awk '{print $3}'
++ sed s/:/-/g
+ SYSROOT_TARBALL=wrlinux-image-cgl
+ SYSROOT_TARBALL=wrlinux-image-cgl.tar.gz
+ rm -rf /tmp/tmp.3wJzZFVRuo
+ break
+ mount
+ grep '^overlay'
+ grep lowerdir=usr
+ grep upperdir=.usr-ovl-upper
+ '[' 1 == 0 ']'
+ tar --exclude=./usr --exclude=./etc '--exclude=./.usr-ovl-*' --xattrs '--xattrs-include=*' -cf - /usr -C /ostree/deploy/wrlinux/deploy/fc336a697aa3e0055bd8ad442853c8c6853f6ac4c1eb33ee48e58b7ba26575f1.0 . -P
+ gzip
++ du -sb /ostree/deploy/wrlinux/deploy/fc336a697aa3e0055bd8ad442853c8c6853f6ac4c1eb33ee48e58b7ba26575f1.0
++ awk '{print $1}'
+ pv -s 1491060969
tar: /usr/etc/gshadow: Cannot open: Permission denied          ] 55% ETA 0:00:26
tar: /usr/etc/shadow: Cannot open: Permission denied
tar: Exiting with failure status due to previous errors======>] 100% ETA 0:00:00
1.42GiB 0:00:52 [27.7MiB/s] [================================>] 102%
+ echo 'The system had been exported to ./wrlinux-image-cgl.tar.gz'
The system had been exported to ./wrlinux-image-cgl.tar.gz

Steps to Reproduce

/lpg-build/cdc/fast_prod/WRLINUX_MASTER_WR/MASTER_WR_GIT/wrlinux-10/setup.sh --machines=intel-x86-64 --distros=wrlinux-cgl --dl-layers --templates feature/ostree feature/linux-yocto-dev feature/userspace-next feature/toolchain-next --layers wr-ostree --accept-eula=yes
. ./oe-init-build-env build
bitbake  wrlinux-image-glibc-std wrlinux-image-glibc-cgl ovmf

In conf/local.conf :
#jhu2 append as below:
BB_NUMBER_THREADS ?= "24"
PARALLEL_MAKE ?= "-j 24"
OSTREE_REMOTE_URL = 'http://pek-lpggp5.wrs.com/OSTREE_PUBLIC_REPO/latest_manual/ostree_repo'
IMAGE_ROOTFS_EXTRA_SPACE = "2048000"

dd wic image into disk, then run "/usr/sbin/semanage login -l"
Live chat
Online