[Spacewalk-list] Spacewalk upgrade 0.5 -> 0.6 fails at schema upgrade

[Milan Zazrivec]

On Wednesday 19 August 2009 11:03:34 Ade wrote:
> 2009/8/19 Milan Zazrivec <mzazrivec at redhat.com>:
> > On Wednesday 19 August 2009 10:29:02 Ade wrote:
> >> 2009/8/19 Milan Zazrivec <mzazrivec at redhat.com>:
> >> > On Wednesday 19 August 2009 10:07:31 Ade wrote:
> >> >> 2009/8/18 Milan Zazrivec <mzazrivec at redhat.com>:
> >> >> > On Tuesday 18 August 2009 10:59:13 Ade wrote:
> >> >> >> Ive been running Spacewalk 0.5 on a Centos 5.3 system for a while
> >> >> >> now and I (yesterday) attempted an upgrade. I realised that I
> >> >> >> hadnt updated the .repo file and so I did this and attempted the
> >> >> >> upgrade again
> >> >> >>
> >> >> >> It fails at the schema upgrade part, with the following error and
> >> >> >> doesnt put any log file in the directory mentioned
> >> >> >>
> >> >> >> Heres the output
> >> >> >>
> >> >> >>
> >> >> >> # /usr/bin/spacewalk-schema-upgrade
> >> >> >> Schema upgrade: [spacewalk-schema-0.5.20-1.el5] ->
> >> >> >> [spacewalk-schema-0.6.22-1.el5]
> >> >> >> Searching for upgrade path: [spacewalk-schema-0.5.20-1] ->
> >> >> >> [spacewalk-schema-0.6.22-1]
> >> >> >> Searching for upgrade path: [spacewalk-schema-0.5.20] ->
> >> >> >> [spacewalk-schema-0.6.22]
> >> >> >> Searching for upgrade path: [spacewalk-schema-0.5] ->
> >> >> >> [spacewalk-schema-0.6] The path: [spacewalk-schema-0.5] ->
> >> >> >> [spacewalk-schema-0.6]
> >> >> >> Planing to run sqlplus with
> >> >> >> [/var/log/spacewalk/schema-upgrade/20090817-155010-script.sql]
> >> >> >> Hit Enter to continue or Ctrl+C to interrupt:
> >> >> >> Executing sqlplus, the logs are in
> >> >> >> /var/log/spacewalk/schema-upgrade/20090817-155010-*.
> >> >> >> O/S Message: Permission denied
> >> >> >
> >> >> > Are you running with selinux enforcing? If so, what does
> >> >> >
> >> >> > # ls -ldZ /var/log/spacewalk/schema-upgrade
> >> >> >
> >> >> > tell you? Normally it should give you:
> >> >> >
> >> >> > # ls -ldZ /var/log/spacewalk/schema-upgrade
> >> >> > drwxr-xr-x  root root
> >> >> > user_u:object_r:oracle_sqlplus_log_t
> >> >> > /var/log/spacewalk/schema-upgrade
> >> >> >
> >> >> > -MZ
> >> >>
> >> >> Hi Milan
> >> >>
> >> >> Yes I am running with SELinux enforcing - here is the output. It
> >> >> looks different to what you expected
> >> >>
> >> >> # ls -ldZ /var/log/spacewalk/schema-upgrade
> >> >> drwxr-xr-x  root root root:object_r:var_log_t
> >> >> /var/log/spacewalk/schema-upgrade
> >> >
> >> > Try running:
> >> >
> >> > # restorecon -vR /var/log/spacewalk/schema-upgrade
> >> >
> >> > and then:
> >> >
> >> > # ls -ldZ /var/log/spacewalk/schema-upgrade
> >> >
> >> > Now (hopefully) the context should look good and you can
> >> > do the schema upgrade now.
> >> >
> >> > -Milan
> >>
> >> I tried it, but it didnt seem to work :-s
> >>
> >> [root at spacewalk ~]# restorecon -vR /var/log/spacewalk/schema-upgrade
> >> [root at spacewalk ~]# ls -ldZ /var/log/spacewalk/schema-upgrade
> >> drwxr-xr-x  root root root:object_r:var_log_t
> >> /var/log/spacewalk/schema-upgrade
> >
> > Perhaps you're missing some of the selinux rpms. Can you please post
> > output from:
> >
> > # rpm -qa|grep selinux
> >
> > -Milan
>
> Im resisting disabling SELinux, for now :-)
>
> [root at spacewalk ~]# rpm -qa|grep selinux
> libselinux-python-1.33.4-5.1.el5
> oracle-instantclient-selinux-10.2-15.el5
> spacewalk-monitoring-selinux-0.6.12-1.el5
> oracle-nofcontext-selinux-0.1-23.11.el5
> libselinux-utils-1.33.4-5.1.el5
> selinux-policy-2.4.6-203.el5
> selinux-policy-targeted-2.4.6-203.el5
> oracle-instantclient-sqlplus-selinux-10.2-15.el5
> oracle-xe-selinux-10.2-13.el5
> spacewalk-selinux-0.6.13-1.el5
> osa-dispatcher-selinux-5.9.21-1.el5
> libselinux-1.33.4-5.1.el5
> jabberd-selinux-1.4.6-1.el5

The problem here is that you're not able to install the updated spacewalk
selinux policy module from Spacewalk 0.6, that defines the context for
/var/log/spacewalk/schema-upgrade

To fix the problem, run following commands:

# semanage port -d -t cobbler_port_t -p tcp 25152
# spacewalk-selinux-enable --run-pure
# restorecon -Rv /var/log/spacewalk/schema-upgrade

After this, the context on that directory should be correct and you
should be able to proceed with schema upgrade :-)

I'm going to update the upgrade instructions on spacewalk wiki.

Thank you for your feedback!

-Milan