===== Display qm container json ===== 81646aedc3cfaab04f341199e7c0889720b63c84d8208ef6ccefcdf7d74a1ac9 { "ociVersion": "1.2.1", "process": { "user": { "uid": 0, "gid": 0, "umask": 18 }, "args": [ "/sbin/init" ], "env": [ "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "HOME=/root", "container_uuid=$CONTAINER", "HOSTNAME=$CONTAINER" ], "cwd": "/", "capabilities": { "bounding": [ "CAP_AUDIT_CONTROL", "CAP_AUDIT_READ", "CAP_AUDIT_WRITE", "CAP_BLOCK_SUSPEND", "CAP_BPF", "CAP_CHECKPOINT_RESTORE", "CAP_CHOWN", "CAP_DAC_OVERRIDE", "CAP_DAC_READ_SEARCH", "CAP_FOWNER", "CAP_FSETID", "CAP_IPC_LOCK", "CAP_IPC_OWNER", "CAP_KILL", "CAP_LEASE", "CAP_LINUX_IMMUTABLE", "CAP_MAC_ADMIN", "CAP_MAC_OVERRIDE", "CAP_MKNOD", "CAP_NET_ADMIN", "CAP_NET_BIND_SERVICE", "CAP_NET_BROADCAST", "CAP_NET_RAW", "CAP_PERFMON", "CAP_SETFCAP", "CAP_SETGID", "CAP_SETPCAP", "CAP_SETUID", "CAP_SYSLOG", "CAP_SYS_ADMIN", "CAP_SYS_CHROOT", "CAP_SYS_MODULE", "CAP_SYS_NICE", "CAP_SYS_PACCT", "CAP_SYS_PTRACE", "CAP_SYS_RAWIO", "CAP_SYS_TIME", "CAP_SYS_TTY_CONFIG", "CAP_WAKE_ALARM" ], "effective": [ "CAP_AUDIT_CONTROL", "CAP_AUDIT_READ", "CAP_AUDIT_WRITE", "CAP_BLOCK_SUSPEND", "CAP_BPF", "CAP_CHECKPOINT_RESTORE", "CAP_CHOWN", "CAP_DAC_OVERRIDE", "CAP_DAC_READ_SEARCH", "CAP_FOWNER", "CAP_FSETID", "CAP_IPC_LOCK", "CAP_IPC_OWNER", "CAP_KILL", "CAP_LEASE", "CAP_LINUX_IMMUTABLE", "CAP_MAC_ADMIN", "CAP_MAC_OVERRIDE", "CAP_MKNOD", "CAP_NET_ADMIN", "CAP_NET_BIND_SERVICE", "CAP_NET_BROADCAST", "CAP_NET_RAW", "CAP_PERFMON", "CAP_SETFCAP", "CAP_SETGID", "CAP_SETPCAP", "CAP_SETUID", "CAP_SYSLOG", "CAP_SYS_ADMIN", "CAP_SYS_CHROOT", "CAP_SYS_MODULE", "CAP_SYS_NICE", "CAP_SYS_PACCT", "CAP_SYS_PTRACE", "CAP_SYS_RAWIO", "CAP_SYS_TIME", "CAP_SYS_TTY_CONFIG", "CAP_WAKE_ALARM" ], "permitted": [ "CAP_AUDIT_CONTROL", "CAP_AUDIT_READ", "CAP_AUDIT_WRITE", "CAP_BLOCK_SUSPEND", "CAP_BPF", "CAP_CHECKPOINT_RESTORE", "CAP_CHOWN", "CAP_DAC_OVERRIDE", "CAP_DAC_READ_SEARCH", "CAP_FOWNER", "CAP_FSETID", "CAP_IPC_LOCK", "CAP_IPC_OWNER", "CAP_KILL", "CAP_LEASE", "CAP_LINUX_IMMUTABLE", "CAP_MAC_ADMIN", "CAP_MAC_OVERRIDE", "CAP_MKNOD", "CAP_NET_ADMIN", "CAP_NET_BIND_SERVICE", "CAP_NET_BROADCAST", "CAP_NET_RAW", "CAP_PERFMON", "CAP_SETFCAP", "CAP_SETGID", "CAP_SETPCAP", "CAP_SETUID", "CAP_SYSLOG", "CAP_SYS_ADMIN", "CAP_SYS_CHROOT", "CAP_SYS_MODULE", "CAP_SYS_NICE", "CAP_SYS_PACCT", "CAP_SYS_PTRACE", "CAP_SYS_RAWIO", "CAP_SYS_TIME", "CAP_SYS_TTY_CONFIG", "CAP_WAKE_ALARM" ] }, "rlimits": [ { "type": "RLIMIT_NOFILE", "hard": 1048576, "soft": 1048576 }, { "type": "RLIMIT_NPROC", "hard": 1048576, "soft": 1048576 } ], "selinuxLabel": "system_u:system_r:qm_t:s0" }, "root": { "path": "/usr/lib/qm/rootfs", "readonly": true }, "hostname": "$CONTAINER", "mounts": [ { "destination": "/dev", "type": "tmpfs", "source": "tmpfs", "options": [ "nosuid", "strictatime", "mode=755", "size=65536k", "ro" ] }, { "destination": "/dev/mqueue", "type": "mqueue", "source": "mqueue", "options": [ "nosuid", "noexec", "nodev" ] }, { "destination": "/dev/pts", "type": "devpts", "source": "devpts", "options": [ "nosuid", "noexec", "newinstance", "ptmxmode=0666", "mode=0620", "gid=5" ] }, { "destination": "/dev/shm", "type": "tmpfs", "source": "tmpfs", "options": [ "rprivate", "nosuid", "nodev", "tmpcopyup" ] }, { "destination": "/etc", "type": "bind", "source": "/etc/qm", "options": [ "rprivate", "rbind" ] }, { "destination": "/etc/hostname", "type": "bind", "source": "/run/containers/storage/overlay-containers/$CONTAINER/userdata/hostname", "options": [ "bind", "rprivate", "ro", "nosuid", "noexec", "nodev" ] }, { "destination": "/etc/hosts", "type": "bind", "source": "/run/containers/storage/overlay-containers/$CONTAINER/userdata/hosts", "options": [ "bind", "rprivate", "ro", "nosuid", "noexec", "nodev" ] }, { "destination": "/etc/resolv.conf", "type": "bind", "source": "/run/containers/storage/overlay-containers/$CONTAINER/userdata/resolv.conf", "options": [ "bind", "rprivate", "ro", "nosuid", "noexec", "nodev" ] }, { "destination": "/proc", "type": "proc", "source": "proc", "options": [ "nosuid", "noexec", "nodev" ] }, { "destination": "/run", "type": "tmpfs", "source": "tmpfs", "options": [ "size=512M", "rprivate", "nosuid", "nodev", "tmpcopyup" ] }, { "destination": "/run/.containerenv", "type": "bind", "source": "/run/containers/storage/overlay-containers/$CONTAINER/userdata/.containerenv", "options": [ "bind", "rprivate", "ro", "nosuid", "noexec", "nodev" ] }, { "destination": "/run/lock", "type": "tmpfs", "source": "tmpfs", "options": [ "rw", "rprivate", "nosuid", "nodev", "tmpcopyup", "" ] }, { "destination": "/run/secrets", "type": "bind", "source": "/run/containers/storage/overlay-containers/$CONTAINER/userdata/run/secrets", "options": [ "bind", "rprivate", "ro", "nosuid", "noexec", "nodev" ] }, { "destination": "/sys", "type": "sysfs", "source": "sysfs", "options": [ "nosuid", "noexec", "nodev", "ro" ] }, { "destination": "/sys/fs/cgroup", "type": "cgroup", "source": "cgroup", "options": [ "private", "rw" ] }, { "destination": "/sys/fs/selinux", "type": "bind", "source": "/sys/fs/selinux", "options": [ "rprivate", "noexec", "nosuid", "rbind" ] }, { "destination": "/tmp", "type": "tmpfs", "source": "tmpfs", "options": [ "size=512M", "rprivate", "nosuid", "nodev", "tmpcopyup" ] }, { "destination": "/var", "type": "bind", "source": "/var/qm", "options": [ "rprivate", "rbind" ] }, { "destination": "/var/log/journal", "type": "tmpfs", "source": "tmpfs", "options": [ "rw", "rprivate", "nosuid", "nodev", "tmpcopyup", "" ] } ], "annotations": { "io.container.manager": "libpod", "io.podman.annotations.autoremove": "TRUE", "io.podman.annotations.label": "type:qm_t,label=filetype:qm_file_t,label=level:s0", "io.podman.annotations.pids-limit": "-1", "io.podman.annotations.seccomp": "/usr/share/qm/seccomp-no-rt.json", "org.opencontainers.image.stopSignal": "37", "org.systemd.property.KillSignal": "37", "org.systemd.property.TimeoutStopUSec": "uint64 10000000", "run.oci.mount_context_type": "rootcontext" }, "linux": { "sysctl": { "fs.mqueue.queues_max": "4", "net.ipv4.ping_group_range": "0 0" }, "resources": { "devices": [ { "allow": false, "access": "rwm" } ], "pids": { "limit": -1 } }, "cgroupsPath": "/qm.service/libpod-payload-$CONTAINER", "namespaces": [ { "type": "pid" }, { "type": "network", "path": "/run/netns/$NETNS" }, { "type": "ipc" }, { "type": "uts" }, { "type": "mount" }, { "type": "cgroup" } ], "seccomp": { "defaultAction": "SCMP_ACT_ERRNO", "defaultErrnoRet": 38, "architectures": [ "SCMP_ARCH_X86_64", "SCMP_ARCH_X86", "SCMP_ARCH_X32" ], "syscalls": [ { "names": [ "bdflush", "cachestat", "futex_requeue", "futex_wait", "futex_waitv", "futex_wake", "io_pgetevents", "io_pgetevents_time64", "kexec_file_load", "kexec_load", "map_shadow_stack", "migrate_pages", "move_pages", "nfsservctl", "nice", "oldfstat", "oldlstat", "oldolduname", "oldstat", "olduname", "pciconfig_iobase", "pciconfig_read", "pciconfig_write", "sgetmask", "ssetmask", "swapoff", "swapon", "syscall", "sysfs", "uselib", "userfaultfd", "ustat", "vm86", "vm86old", "vmsplice" ], "action": "SCMP_ACT_ERRNO", "errnoRet": 1 }, { "names": [ "_llseek", "_newselect", "accept", "accept4", "access", "adjtimex", "alarm", "bind", "brk", "capget", "capset", "chdir", "chmod", "chown", "chown32", "clock_adjtime", "clock_adjtime64", "clock_getres", "clock_getres_time64", "clock_gettime", "clock_gettime64", "clock_nanosleep", "clock_nanosleep_time64", "clone", "clone3", "close", "close_range", "connect", "copy_file_range", "creat", "dup", "dup2", "dup3", "epoll_create", "epoll_create1", "epoll_ctl", "epoll_ctl_old", "epoll_pwait", "epoll_pwait2", "epoll_wait", "epoll_wait_old", "eventfd", "eventfd2", "execve", "execveat", "exit", "exit_group", "faccessat", "faccessat2", "fadvise64", "fadvise64_64", "fallocate", "fanotify_init", "fanotify_mark", "fchdir", "fchmod", "fchmodat", "fchmodat2", "fchown", "fchown32", "fchownat", "fcntl", "fcntl64", "fdatasync", "fgetxattr", "flistxattr", "flock", "fork", "fremovexattr", "fsconfig", "fsetxattr", "fsmount", "fsopen", "fspick", "fstat", "fstat64", "fstatat64", "fstatfs", "fstatfs64", "fsync", "ftruncate", "ftruncate64", "futex", "futex_time64", "futimesat", "get_mempolicy", "get_robust_list", "get_thread_area", "getcpu", "getcwd", "getdents", "getdents64", "getegid", "getegid32", "geteuid", "geteuid32", "getgid", "getgid32", "getgroups", "getgroups32", "getitimer", "getpeername", "getpgid", "getpgrp", "getpid", "getppid", "getpriority", "getrandom", "getresgid", "getresgid32", "getresuid", "getresuid32", "getrlimit", "getrusage", "getsid", "getsockname", "getsockopt", "gettid", "gettimeofday", "getuid", "getuid32", "getxattr", "inotify_add_watch", "inotify_init", "inotify_init1", "inotify_rm_watch", "io_cancel", "io_destroy", "io_getevents", "io_setup", "io_submit", "ioctl", "ioprio_get", "ioprio_set", "ipc", "keyctl", "kill", "landlock_add_rule", "landlock_create_ruleset", "landlock_restrict_self", "lchown", "lchown32", "lgetxattr", "link", "linkat", "listen", "listxattr", "llistxattr", "lremovexattr", "lseek", "lsetxattr", "lstat", "lstat64", "madvise", "mbind", "membarrier", "memfd_create", "memfd_secret", "mincore", "mkdir", "mkdirat", "mknod", "mknodat", "mlock", "mlock2", "mlockall", "mmap", "mmap2", "mount", "mount_setattr", "move_mount", "mprotect", "mq_getsetattr", "mq_notify", "mq_open", "mq_timedreceive", "mq_timedreceive_time64", "mq_timedsend", "mq_timedsend_time64", "mq_unlink", "mremap", "msgctl", "msgget", "msgrcv", "msgsnd", "msync", "munlock", "munlockall", "munmap", "name_to_handle_at", "nanosleep", "newfstatat", "open", "open_tree", "openat", "openat2", "pause", "pidfd_getfd", "pidfd_open", "pidfd_send_signal", "pipe", "pipe2", "pivot_root", "pkey_alloc", "pkey_free", "pkey_mprotect", "poll", "ppoll", "ppoll_time64", "prctl", "pread64", "preadv", "preadv2", "prlimit64", "process_mrelease", "process_vm_readv", "process_vm_writev", "pselect6", "pselect6_time64", "ptrace", "pwrite64", "pwritev", "pwritev2", "read", "readahead", "readlink", "readlinkat", "readv", "reboot", "recv", "recvfrom", "recvmmsg", "recvmmsg_time64", "recvmsg", "remap_file_pages", "removexattr", "rename", "renameat", "renameat2", "restart_syscall", "rmdir", "rseq", "rt_sigaction", "rt_sigpending", "rt_sigprocmask", "rt_sigqueueinfo", "rt_sigreturn", "rt_sigsuspend", "rt_sigtimedwait", "rt_sigtimedwait_time64", "rt_tgsigqueueinfo", "sched_get_priority_max", "sched_get_priority_min", "sched_getaffinity", "sched_getattr", "sched_getparam", "sched_getscheduler", "sched_rr_get_interval", "sched_rr_get_interval_time64", "sched_setaffinity", "sched_setparam", "sched_yield", "seccomp", "select", "semctl", "semget", "semop", "semtimedop", "semtimedop_time64", "send", "sendfile", "sendfile64", "sendmmsg", "sendmsg", "sendto", "set_mempolicy", "set_robust_list", "set_thread_area", "set_tid_address", "setfsgid", "setfsgid32", "setfsuid", "setfsuid32", "setgid", "setgid32", "setgroups", "setgroups32", "setitimer", "setns", "setpgid", "setpriority", "setregid", "setregid32", "setresgid", "setresgid32", "setresuid", "setresuid32", "setreuid", "setreuid32", "setrlimit", "setsid", "setsockopt", "setuid", "setuid32", "setxattr", "shmat", "shmctl", "shmdt", "shmget", "shutdown", "sigaltstack", "signal", "signalfd", "signalfd4", "sigprocmask", "sigreturn", "socket", "socketcall", "socketpair", "splice", "stat", "stat64", "statfs", "statfs64", "statx", "symlink", "symlinkat", "sync", "sync_file_range", "syncfs", "sysinfo", "syslog", "tee", "tgkill", "time", "timer_create", "timer_delete", "timer_getoverrun", "timer_gettime", "timer_gettime64", "timer_settime", "timer_settime64", "timerfd_create", "timerfd_gettime", "timerfd_gettime64", "timerfd_settime", "timerfd_settime64", "times", "tkill", "truncate", "truncate64", "ugetrlimit", "umask", "umount", "umount2", "uname", "unlink", "unlinkat", "unshare", "utime", "utimensat", "utimensat_time64", "utimes", "vfork", "wait4", "waitid", "waitpid", "write", "writev" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "personality" ], "action": "SCMP_ACT_ALLOW", "args": [ { "index": 0, "value": 0, "op": "SCMP_CMP_EQ" } ] }, { "names": [ "personality" ], "action": "SCMP_ACT_ALLOW", "args": [ { "index": 0, "value": 8, "op": "SCMP_CMP_EQ" } ] }, { "names": [ "personality" ], "action": "SCMP_ACT_ALLOW", "args": [ { "index": 0, "value": 131072, "op": "SCMP_CMP_EQ" } ] }, { "names": [ "personality" ], "action": "SCMP_ACT_ALLOW", "args": [ { "index": 0, "value": 131080, "op": "SCMP_CMP_EQ" } ] }, { "names": [ "personality" ], "action": "SCMP_ACT_ALLOW", "args": [ { "index": 0, "value": 4294967295, "op": "SCMP_CMP_EQ" } ] }, { "names": [ "arch_prctl" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "modify_ldt" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "open_by_handle_at" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "bpf", "lookup_dcookie", "quotactl", "quotactl_fd", "setdomainname", "sethostname", "setns" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "chroot" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "delete_module", "finit_module", "init_module", "query_module" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "acct" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "kcmp", "process_madvise" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "ioperm", "iopl" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "clock_settime", "clock_settime64", "settimeofday", "stime" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "vhangup" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "socket" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "bpf" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "perf_event_open" ], "action": "SCMP_ACT_ALLOW" }, { "names": [ "sched_setscheduler" ], "action": "SCMP_ACT_ALLOW", "args": [ { "index": 1, "value": 0, "op": "SCMP_CMP_EQ" } ] }, { "names": [ "sched_setscheduler" ], "action": "SCMP_ACT_ALLOW", "args": [ { "index": 1, "value": 3, "op": "SCMP_CMP_EQ" } ] }, { "names": [ "sched_setscheduler" ], "action": "SCMP_ACT_ALLOW", "args": [ { "index": 1, "value": 5, "op": "SCMP_CMP_EQ" } ] }, { "names": [ "sched_setattr" ], "action": "SCMP_ACT_ERRNO", "errnoRet": 1 } ] }, "maskedPaths": [ "/proc/acpi", "/proc/kcore", "/proc/keys", "/proc/latency_stats", "/proc/sched_debug", "/proc/scsi", "/proc/timer_list", "/proc/timer_stats", "/sys/devices/virtual/powercap", "/sys/firmware", "/proc/interrupts", "/sys/devices/virtual/powercap" ], "readonlyPaths": [ "/proc/asound", "/proc/bus", "/proc/fs", "/proc/irq", "/proc/sys", "/proc/sysrq-trigger" ], "mountLabel": "system_u:object_r:qm_file_t:s0" } } PASS: dmesg_clean running PASS: system kernel panic value == -1 PASS: '/proc/sys/kernel/sched_autogroup_enabled' does not exist, it is properly disabled. PASS: '/proc/sys/kernel/sched_cfs_bandwidth_slice_us' has '5000' as value INFO: Temporarily skipping the verification of the /proc/sys/kernel/sched_child_runs_first option value! PASS: '/proc/sys/kernel/sched_deadline_period_max_us' has '4194304' as value PASS: '/proc/sys/kernel/sched_deadline_period_min_us' has '100' as value PASS: '/proc/sys/kernel/sched_rr_timeslice_ms' has '100' as value PASS: '/proc/sys/kernel/sched_rt_period_us' has '1000000' as value PASS: '/proc/sys/kernel/sched_rt_runtime_us' has '950000' as value PASS: '/proc/sys/kernel/sched_schedstats' has '0' as value INFO: libstdc++.so.6 is a symbolic link and NOT a real file so FAIL needs to pass until it is FIXed PASS: libc.so.6 is correctly registered as a file: /lib64/libc.so.6 PASS: libc.so.6 correctly resolves to: /lib64/libc.so.6 FAIL: libstdc++.so.6 points to a symlink or does not exist: /lib64/libstdc++.so.6 PASS: libstdc++.so.6 correctly resolves to: /lib64/libstdc++.so.6 INFO: Testing write access to /etc/ld.so.cache... tee: /etc/ld.so.cache: Read-only file system PASS: Write attempt failed as expected. INFO: Checking if busy polling is disabled... PASS: net.core.busy_poll is disabled. INFO: Checking if mc_forwarding is disabled... PASS: net.ipv4.conf.all.mc_forwarding is disabled. PASS: net.ipv4.conf.default.mc_forwarding is disabled. INFO: Checking if NFS modules are disabled... modprobe: FATAL: Module nfs not found in directory /lib/modules/6.12.0-150.el10iv.x86_64 modprobe: FATAL: Module nfs_layout_nfsv41_files not found in directory /lib/modules/6.12.0-150.el10iv.x86_64 modprobe: FATAL: Module nfsv3 not found in directory /lib/modules/6.12.0-150.el10iv.x86_64 modprobe: FATAL: Module nfsv4 not found in directory /lib/modules/6.12.0-150.el10iv.x86_64 modprobe: FATAL: Module nfs_layout_flexfiles not found in directory /lib/modules/6.12.0-150.el10iv.x86_64 modprobe: FATAL: Module nfs_acl not found in directory /lib/modules/6.12.0-150.el10iv.x86_64 modprobe: FATAL: Module nfsd not found in directory /lib/modules/6.12.0-150.el10iv.x86_64 modprobe: FATAL: Module blocklayoutdriver not found in directory /lib/modules/6.12.0-150.el10iv.x86_64 PASS: All NFS modules are disabled. INFO: Checking if VFAT modules are disabled... modprobe: FATAL: Module vfat not found in directory /lib/modules/6.12.0-150.el10iv.x86_64 modprobe: FATAL: Module fat not found in directory /lib/modules/6.12.0-150.el10iv.x86_64 PASS: All VFAT modules are disabled. INFO: Detected architecture: x86_64. INFO: Extracting required RPMs... INFO: fsverity binary: /var/tmp/binaries/usr/bin/fsverity INFO: hdparm binary: /var/tmp/binaries/usr/sbin/hdparm INFO: Running composefs_block_fsverity test... INFO: Backing file: /ostree/repo/objects/ea/6069b018eae19f7dbab71518917010526e25cdee8d94ee9a41f92d9d54c4ff.file INFO: Backing up /ostree/repo/objects/ea/6069b018eae19f7dbab71518917010526e25cdee8d94ee9a41f92d9d54c4ff.file to /var/tmp/composefs_test/backup//ostree/repo/objects/ea/6069b018eae19f7dbab71518917010526e25cdee8d94ee9a41f92d9d54c4ff.file INFO: offset calculated is 770736128. INFO: Initial read (before corruption): 00000000 6d 75 6c 74 69 20 6f 6e 0a 00 00 00 00 00 00 00 |multi on........| 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000020 INFO: Writing corruption bytes (FOOBAR) at offset 770736134... INFO: Read after corruption: 00000000 6d 75 6c 74 69 20 46 4f 4f 42 41 52 00 00 00 00 |multi FOOBAR....| 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000020 INFO: Reading file through overlay... grep: /usr/etc/host.conf: Input/output error INFO: Checking kernel journal for fs-verity corruption message... Nov 01 05:06:26 localhost kernel: fs-verity (nvme0n1p6, inode 13957): FILE CORRUPTED! pos=0, level=-1, want_hash=sha256:29fcf39f5061eb19a58ea3056031212fbf88d24fbc9c9e0d42e74bafe8ab4b13, real_hash=sha256:fe08affd2f145ce18d2a3c68a468df1b333b7bfc250668b3fe6cc8a41236eb27 INFO: Restoring /ostree/repo/objects/ea/6069b018eae19f7dbab71518917010526e25cdee8d94ee9a41f92d9d54c4ff.file from backup... PASS: Kernel correctly detected fsverity FILE CORRUPTED. INFO: Cleaning up... + '[' '!' -e /run/ostree-booted ']' ++ mount ++ grep '^composefs on / type overlay' + COMPOSEFS_MOUNT_POINT='composefs on / type overlay (ro,relatime,seclabel,lowerdir+=/run/ostree/.private/cfsroot-lower,datadir+=/sysroot/ostree/repo/objects,redirect_dir=on,metacopy=on,verity=require)' + [[ -n composefs on / type overlay (ro,relatime,seclabel,lowerdir+=/run/ostree/.private/cfsroot-lower,datadir+=/sysroot/ostree/repo/objects,redirect_dir=on,metacopy=on,verity=require) ]] + [[ composefs on / type overlay (ro,relatime,seclabel,lowerdir+=/run/ostree/.private/cfsroot-lower,datadir+=/sysroot/ostree/repo/objects,redirect_dir=on,metacopy=on,verity=require) =~ ^.*verity=require.*$ ]] + echo 'PASS: Composefs is mounted on / and verity option is set to require' PASS: Composefs is mounted on / and verity option is set to require + RC=0 + exit 0 INFO: Detected architecture: x86_64. INFO: Extracting required RPMs... INFO: fsverity binary: /var/tmp/binaries/usr/bin/fsverity INFO: hdparm binary: /var/tmp/binaries/usr/sbin/hdparm INFO: Running composefs_lowerfile test... INFO: Backing file: /ostree/repo/objects/45/29a2424d51eaf4260981090b0202ea47bb721d53a1fe9cc4207daabe225db7.file. INFO: Backing up /ostree/repo/objects/45/29a2424d51eaf4260981090b0202ea47bb721d53a1fe9cc4207daabe225db7.file to /var/tmp/composefs_test/backup//ostree/repo/objects/45/29a2424d51eaf4260981090b0202ea47bb721d53a1fe9cc4207daabe225db7.file sha256:020d86f24e27675d8da0e5385ddce7397c7cd612562da0efd15f0c7f9ab7395a /ostree/repo/objects/45/29a2424d51eaf4260981090b0202ea47bb721d53a1fe9cc4207daabe225db7.file INFO: Reading file through overlay... grep: /usr/share/libgpg-error/errorref.txt: Input/output error INFO: Checking kernel journal for fs-verity missing digest message... Nov 01 05:06:28 localhost kernel: overlayfs: lower file '29a2424d51eaf4260981090b0202ea47bb721d53a1fe9cc4207daabe225db7.file' has no fs-verity digest INFO: Restoring /ostree/repo/objects/45/29a2424d51eaf4260981090b0202ea47bb721d53a1fe9cc4207daabe225db7.file from backup... PASS: No fs-verity digest detected for backing file. INFO: Cleaning up... INFO: Detected architecture: x86_64. INFO: Extracting required RPMs... INFO: fsverity binary: /var/tmp/binaries/usr/bin/fsverity INFO: hdparm binary: /var/tmp/binaries/usr/sbin/hdparm INFO: Running composefs_mod_lowerfile test... INFO: Backing file: /ostree/repo/objects/53/cf11b021b3a1d5d2e55f852eada754b95b959bd20ea3f04f5bf0a4e9f71902.file. INFO: Backing up /ostree/repo/objects/53/cf11b021b3a1d5d2e55f852eada754b95b959bd20ea3f04f5bf0a4e9f71902.file to /var/tmp/composefs_test/backup//ostree/repo/objects/53/cf11b021b3a1d5d2e55f852eada754b95b959bd20ea3f04f5bf0a4e9f71902.file sha256:4a337a1c0faf8f671db6e21bbcb4a3ce7d90d0f9b3b325f1aacbb7e33ede9744 /ostree/repo/objects/53/cf11b021b3a1d5d2e55f852eada754b95b959bd20ea3f04f5bf0a4e9f71902.file INFO: Reading file through overlay... grep: /usr/etc/adjtime: Input/output error INFO: Checking kernel journal for fs-verity error message about wrong digest... Nov 01 05:06:30 localhost kernel: overlayfs: lower file 'cf11b021b3a1d5d2e55f852eada754b95b959bd20ea3f04f5bf0a4e9f71902.file' has the wrong fs-verity digest INFO: Restoring /ostree/repo/objects/53/cf11b021b3a1d5d2e55f852eada754b95b959bd20ea3f04f5bf0a4e9f71902.file from backup... PASS: Kernel detected fsverity backing file modified with wrong digest. INFO: Cleaning up... + INITRAMFS_FILE=(/boot/ostree/*/initramfs-"$(uname -r)".img) ++ uname -r + CONF_FILE=usr/lib/ostree/prepare-root.conf + '[' '!' -e /run/ostree-booted ']' + mkdir /tmp/initrd + cd /tmp/initrd + lz4cat /boot/ostree/centos-ce4ae494180a5248b5b30543f104afa2a24e88a0919b96307036e316b9499120/initramfs-6.12.0-150.el10iv.x86_64.img + cpio -id usr/lib/ostree/prepare-root.conf Error 54 : Decoding Failed ! Corrupted input detected ! 65853 blocks ++ awk -F = '/\[composefs\]/{a=1}a==1&&$1~/enabled/{print $2;exit}' usr/lib/ostree/prepare-root.conf + COMPOSEFS_ENABLED=signed + '[' signed == signed ']' + echo 'PASS: Image is signed with composefs!' PASS: Image is signed with composefs! + RC=0 + cd /root + rm -rf /tmp/initrd + exit 0 * centos 2e802d85f2c0ba11090b9072b6407645e2646d4056050cc979e76b1233bf9a67.0 Version: unversioned origin refspec: auto-sig:autosd10/x86_64/qemu-fusa-minimal INFO: secure_mode_policyload current is: secure_mode_policyload --> on PASS: secure_mode_policyload is enabled. PASS: No AVC errors detected in dmesg logs. PASS: Selinux is enabled on this system. INFO: Selinux current mode is the same as the mode from config file. PASS: Both of the modes are Enforcing. PASS: selinux_check INFO: Version 42.1.9-1.el10 is within test range. Running selinux_deny_unknown test... PASS: deny_unknown is correctly set to denied (value: 1) PASS: ptrace syscall is disabled. PASS: qm is currently loaded into the SELinux policy on running image. PASS: selinux_qm_module_enabled INFO: SELinux is currently in enforcing mode and secure_mode_policyload is enabled. INFO: Attempting to switch SELinux to Permissive mode... INFO: Saving current SELinux policy... INFO: Installing the test policy to system location... INFO: Attempting to load new policy... SELinux: Could not load policy file /etc/selinux/automotive/policy/policy.35: Permission denied /sbin/load_policy: Can't load policy: Permission denied PASS: Policy load failed as expected. INFO: Saving SELinux policy after attempting to load... PASS: SELinux mode was not changed to permissive and different SELinux policy couldn't be loaded. INFO: Podman service is not enabled. PASS: disabled_podman systemd-journald is: active systemd-logind is: active systemd-sysctl is: active systemd-udevd is: active INFO: Transient_store is set to true in configuration file /usr/share/containers/storage.conf. PASS: transient_store PASS: The /proc is using a PID namespace PASS: The /sys is mounted as read-only filesystem PASS: The /sys/fs/selinux is mounted as read-write but it doesn't have writable files PASS: The /sys/fs/cgroup is a cgroup nested tree PASS: The /proc/acpi is mounted as read-only filesystem PASS: The /proc/kcore is mounted as read-only filesystem PASS: The /proc/keys is mounted as read-only filesystem PASS: The /proc/scsi is mounted as read-only filesystem PASS: The /proc/timer_list is mounted as read-only filesystem PASS: The /sys/firmware is mounted as read-only filesystem PASS: The /proc/interrupts is mounted as read-only filesystem PASS: The /proc/asound is mounted as read-only filesystem PASS: The /proc/bus is mounted as read-only filesystem PASS: The /proc/fs is mounted as read-only filesystem PASS: The /proc/irq is mounted as read-only filesystem PASS: The /proc/sys is mounted as read-only filesystem PASS: The /proc/sysrq-trigger is mounted as read-only filesystem PASS: The /sys/kernel/tracing is mounted as read-write but it doesn't have writable files PASS: The /sys/kernel/debug is mounted as read-write but it doesn't have writable files PASS: The /sys/fs/fuse/connections is mounted as read-write but it doesn't have writable files PASS: The /sys/kernel/config is mounted as read-write but it doesn't have writable files