Can't install EE on Debian 9.4 with SELinux
From #2875 (comment 65074104):
bash[Set proper security context on ssh files for selinux] (gitlab::gitlab-shell line 103) had an error: Mixlib::ShellOut::ShellCommandFailed: Expected process to exit with [0], but received '255'
---- Begin output of "bash" "/tmp/chef-script20180320-23355-hv0pgj" ----
STDOUT:
STDERR: ValueError: File context for /var/opt/gitlab/.ssh(/.*)? already defined
ValueError: File context for /var/opt/gitlab/.ssh/authorized_keys already defined
ValueError: File context for /var/opt/gitlab/gitlab-shell/config.yml already defined
ValueError: File context for /var/opt/gitlab/gitlab-rails/etc/gitlab_shell_secret already defined
SELinux: Could not get canonical path for /var/opt/gitlab/gitlab-rails/etc/gitlab_shell_secret restorecon: No such file or directory.
---- End output of "bash" "/tmp/chef-script20180320-23355-hv0pgj" ----
Ran "bash" "/tmp/chef-script20180320-23355-hv0pgj" returned 255
ZD: https://gitlab.zendesk.com/agent/tickets/93003
As far as I know, we've only tested SELinux on CentOS. @atanayno I assume you tested on Debian, or did you replicate the issue on CentOS?
The restorecon
error suggests policyutils-python
isn't installed.
I wonder if Debian's semanage
command-line doesn't like redefining the same rules, but CentOS works?
/cc: @atanayno, @joshlambert
Edited by Stan Hu