Re: RHEL9?

Hi David,

I am working on this right now and have worked up a solution.

Essentially our compiled cfengine-enterprise.pp selinux policy is compiled 
to a certain policydb version.

Probably the best work-around for you right now is to re-compile the policy 
yourself from sources in the cfengine core repository.

$ git clone https://github.com/cfengine/core --depth 1 # or use what you 
have already checked out
$ sudo yum install selinux-policy-devel
$ cd core/misc/selinux
$ make -f /usr/share/selinux/devel/Makefile -j1
$ sudo semodule -n -i cfengine-enterprise.pp

See this pair of PRs for core and buildscripts for my pretty close to done 
work in progress for solving this in the installer package:

https://github.com/cfengine/core/pull/5146
https://github.com/cfengine/buildscripts/pull/1187

Where I have added a Requires for the version of selinux-policy package 
that we use when we build the package and similar work-around notes as 
above if the module fails to import.

Cheers,
Craig


On Friday, January 6, 2023 at 12:37:49 PM UTC-6 Nick Anderson wrote:

> "t.d…@servicemusic.org.uk" <[email protected]> writes: 
>
> I observe that the community download page 
> https://cfengine.com/downloads/cfengine-community/ offers RHEL9/CentOS9 
> for 3.21.0 LTS (good) but not for 3.18.3 LTS. If 3.18.3 now supports RHEL9, 
> could that page be investigated and rectified, please? (Because of "rxdirs" 
> I'd rather avoid 3.21 for the moment… there's plenty of other catch-up for 
> me to do prior to that! So if a 3.18/RHEL9 RPM s available that would be 
> great.) 
>
> That's because we have not released a 3.18 package for el9. The 3.18.x 
> output I showed you was from nightly builds, so 3.18.4 (hopefully). 
>
> Meanwhile: a possible "semodule" bug report for 3.21 on RHEL9. Latest OS 
> (yum upgrade); I had installed before Christmas. I hit the problem just 
> now; then did a yum upgrade (lots of packages upgraded), then rebooted, 
> then tried again. Problem still there. This is the latest:: 
>
> Yeah, we have noticed some issues with el9 and needing to be updated in 
> order for the package to install. We are still looking at how to best 
> address it. 
>
> – Nick Anderson | Doer of Things | (+1) 785-550-1767 <(785)%20550-1767> | 
> https://northern.tech 
>

-- 
You received this message because you are subscribed to the Google Groups "help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/help-cfengine/5afa8640-35ec-4fb9-803b-3ec14f822851n%40googlegroups.com.