PASS: dmesg_clean running PASS: system kernel panic value == -1 PASS: '/proc/sys/kernel/sched_autogroup_enabled' has '1' as value PASS: '/proc/sys/kernel/sched_cfs_bandwidth_slice_us' has '5000' as value PASS: '/proc/sys/kernel/sched_child_runs_first' has '0' as value PASS: '/proc/sys/kernel/sched_deadline_period_max_us' has '4194304' as value PASS: '/proc/sys/kernel/sched_deadline_period_min_us' has '100' as value PASS: '/proc/sys/kernel/sched_rr_timeslice_ms' has '100' as value PASS: '/proc/sys/kernel/sched_rt_period_us' has '1000000' as value PASS: '/proc/sys/kernel/sched_rt_runtime_us' has '950000' as value PASS: '/proc/sys/kernel/sched_schedstats' has '0' as value INFO: libstdc++.so.6 is a symbolic link and NOT a real file so FAIL needs to pass until it is FIXed PASS: libc.so.6 is correctly registered as a file: /lib64/libc.so.6 PASS: libc.so.6 correctly resolves to: /lib64/libc.so.6 FAIL: libstdc++.so.6 points to a symlink or does not exist: /lib64/libstdc++.so.6 PASS: libstdc++.so.6 correctly resolves to: /lib64/libstdc++.so.6 INFO: Testing write access to /etc/ld.so.cache... tee: /etc/ld.so.cache: Read-only file system PASS: Write attempt failed as expected. INFO: Checking if busy polling is disabled... PASS: net.core.busy_poll is disabled. INFO: Checking if mc_forwarding is disabled... PASS: net.ipv4.conf.all.mc_forwarding is disabled. PASS: net.ipv4.conf.default.mc_forwarding is disabled. INFO: Checking if NFS modules are disabled... modprobe: FATAL: Module nfs not found in directory /lib/modules/5.14.0-617.566.el9iv.x86_64 modprobe: FATAL: Module nfs_layout_nfsv41_files not found in directory /lib/modules/5.14.0-617.566.el9iv.x86_64 modprobe: FATAL: Module nfsv3 not found in directory /lib/modules/5.14.0-617.566.el9iv.x86_64 modprobe: FATAL: Module nfsv4 not found in directory /lib/modules/5.14.0-617.566.el9iv.x86_64 modprobe: FATAL: Module nfs_layout_flexfiles not found in directory /lib/modules/5.14.0-617.566.el9iv.x86_64 modprobe: FATAL: Module nfs_acl not found in directory /lib/modules/5.14.0-617.566.el9iv.x86_64 modprobe: FATAL: Module nfsd not found in directory /lib/modules/5.14.0-617.566.el9iv.x86_64 modprobe: FATAL: Module blocklayoutdriver not found in directory /lib/modules/5.14.0-617.566.el9iv.x86_64 PASS: All NFS modules are disabled. INFO: Checking if VFAT modules are disabled... modprobe: FATAL: Module vfat not found in directory /lib/modules/5.14.0-617.566.el9iv.x86_64 modprobe: FATAL: Module fat not found in directory /lib/modules/5.14.0-617.566.el9iv.x86_64 PASS: All VFAT modules are disabled. INFO: Detected architecture: x86_64. INFO: Extracting required RPMs... INFO: fsverity binary: /var/tmp/binaries/usr/bin/fsverity INFO: hdparm binary: /var/tmp/binaries/usr/sbin/hdparm INFO: Running composefs_block_fsverity test... INFO: Backing file: /ostree/repo/objects/ea/6069b018eae19f7dbab71518917010526e25cdee8d94ee9a41f92d9d54c4ff.file INFO: Backing up /ostree/repo/objects/ea/6069b018eae19f7dbab71518917010526e25cdee8d94ee9a41f92d9d54c4ff.file to /var/tmp/composefs_test/backup//ostree/repo/objects/ea/6069b018eae19f7dbab71518917010526e25cdee8d94ee9a41f92d9d54c4ff.file INFO: offset calculated is 985890816. INFO: Initial read (before corruption): 00000000 6d 75 6c 74 69 20 6f 6e 0a 00 00 00 00 00 00 00 |multi on........| 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000020 INFO: Writing corruption bytes (FOOBAR) at offset 985890822... INFO: Read after corruption: 00000000 6d 75 6c 74 69 20 46 4f 4f 42 41 52 00 00 00 00 |multi FOOBAR....| 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000020 INFO: Reading file through overlay... grep: /usr/etc/host.conf: Input/output error INFO: Checking kernel journal for fs-verity corruption message... Oct 01 02:20:26 localhost kernel: fs-verity (nvme0n1p4, inode 18458): FILE CORRUPTED! pos=0, level=-1, want_hash=sha256:29fcf39f5061eb19a58ea3056031212fbf88d24fbc9c9e0d42e74bafe8ab4b13, real_hash=sha256:fe08affd2f145ce18d2a3c68a468df1b333b7bfc250668b3fe6cc8a41236eb27 INFO: Restoring /ostree/repo/objects/ea/6069b018eae19f7dbab71518917010526e25cdee8d94ee9a41f92d9d54c4ff.file from backup... PASS: Kernel correctly detected fsverity FILE CORRUPTED. INFO: Cleaning up... + '[' '!' -e /run/ostree-booted ']' ++ mount ++ grep '^composefs on / type overlay' + COMPOSEFS_MOUNT_POINT='composefs on / type overlay (ro,relatime,seclabel,lowerdir+=/run/ostree/.private/cfsroot-lower,datadir+=/sysroot/ostree/repo/objects,redirect_dir=on,metacopy=on,verity=require)' + [[ -n composefs on / type overlay (ro,relatime,seclabel,lowerdir+=/run/ostree/.private/cfsroot-lower,datadir+=/sysroot/ostree/repo/objects,redirect_dir=on,metacopy=on,verity=require) ]] + [[ composefs on / type overlay (ro,relatime,seclabel,lowerdir+=/run/ostree/.private/cfsroot-lower,datadir+=/sysroot/ostree/repo/objects,redirect_dir=on,metacopy=on,verity=require) =~ ^.*verity=require.*$ ]] + echo 'PASS: Composefs is mounted on / and verity option is set to require' PASS: Composefs is mounted on / and verity option is set to require + RC=0 + exit 0 INFO: Detected architecture: x86_64. INFO: Extracting required RPMs... INFO: fsverity binary: /var/tmp/binaries/usr/bin/fsverity INFO: hdparm binary: /var/tmp/binaries/usr/sbin/hdparm INFO: Running composefs_lowerfile test... INFO: Backing file: /ostree/repo/objects/23/24230e97cb052e023730209ffc43d805551fcf0454ce799c7cb799c7d7be31.file. INFO: Backing up /ostree/repo/objects/23/24230e97cb052e023730209ffc43d805551fcf0454ce799c7cb799c7d7be31.file to /var/tmp/composefs_test/backup//ostree/repo/objects/23/24230e97cb052e023730209ffc43d805551fcf0454ce799c7cb799c7d7be31.file sha256:0ad15532b59b91e5a9e34c261f80552068cf1bb65fa0822bc15aa51d66579974 /ostree/repo/objects/23/24230e97cb052e023730209ffc43d805551fcf0454ce799c7cb799c7d7be31.file INFO: Reading file through overlay... grep: /usr/share/libgpg-error/errorref.txt: Input/output error INFO: Checking kernel journal for fs-verity missing digest message... Oct 01 02:20:28 localhost kernel: overlayfs: lower file '24230e97cb052e023730209ffc43d805551fcf0454ce799c7cb799c7d7be31.file' has no fs-verity digest INFO: Restoring /ostree/repo/objects/23/24230e97cb052e023730209ffc43d805551fcf0454ce799c7cb799c7d7be31.file from backup... PASS: No fs-verity digest detected for backing file. INFO: Cleaning up... INFO: Detected architecture: x86_64. INFO: Extracting required RPMs... INFO: fsverity binary: /var/tmp/binaries/usr/bin/fsverity INFO: hdparm binary: /var/tmp/binaries/usr/sbin/hdparm INFO: Running composefs_mod_lowerfile test... INFO: Backing file: /ostree/repo/objects/53/cf11b021b3a1d5d2e55f852eada754b95b959bd20ea3f04f5bf0a4e9f71902.file. INFO: Backing up /ostree/repo/objects/53/cf11b021b3a1d5d2e55f852eada754b95b959bd20ea3f04f5bf0a4e9f71902.file to /var/tmp/composefs_test/backup//ostree/repo/objects/53/cf11b021b3a1d5d2e55f852eada754b95b959bd20ea3f04f5bf0a4e9f71902.file sha256:4a337a1c0faf8f671db6e21bbcb4a3ce7d90d0f9b3b325f1aacbb7e33ede9744 /ostree/repo/objects/53/cf11b021b3a1d5d2e55f852eada754b95b959bd20ea3f04f5bf0a4e9f71902.file INFO: Reading file through overlay... grep: /usr/etc/adjtime: Input/output error INFO: Checking kernel journal for fs-verity error message about wrong digest... Oct 01 02:20:30 localhost kernel: overlayfs: lower file 'cf11b021b3a1d5d2e55f852eada754b95b959bd20ea3f04f5bf0a4e9f71902.file' has the wrong fs-verity digest INFO: Restoring /ostree/repo/objects/53/cf11b021b3a1d5d2e55f852eada754b95b959bd20ea3f04f5bf0a4e9f71902.file from backup... PASS: Kernel detected fsverity backing file modified with wrong digest. INFO: Cleaning up... + INITRAMFS_FILE=(/boot/ostree/*/initramfs-"$(uname -r)".img) ++ uname -r + CONF_FILE=usr/lib/ostree/prepare-root.conf + '[' '!' -e /run/ostree-booted ']' + mkdir /tmp/initrd + cd /tmp/initrd + lz4cat /boot/ostree/centos-30c4d911db9c3611e0e89f513ce9029b73808340270445e66106315e8c8b8f74/initramfs-5.14.0-617.566.el9iv.x86_64.img + cpio -id usr/lib/ostree/prepare-root.conf Error 53 : Decoding Failed ! Corrupted input detected ! 59004 blocks ++ awk -F = '/\[composefs\]/{a=1}a==1&&$1~/enabled/{print $2;exit}' usr/lib/ostree/prepare-root.conf + COMPOSEFS_ENABLED=signed + '[' signed == signed ']' + echo 'PASS: Image is signed with composefs!' PASS: Image is signed with composefs! + RC=0 + cd /root + rm -rf /tmp/initrd + exit 0 * centos 99c5a4bfbffe7a97f472045ab6a838fdcc87947713b471692919d7415e2deea3.0 Version: unversioned origin refspec: auto-sig:autosd9/x86_64/qemu-fusa-minimal INFO: secure_mode_policyload current is: secure_mode_policyload --> on PASS: secure_mode_policyload is enabled. PASS: No AVC errors detected in dmesg logs. PASS: Selinux is enabled on this system. INFO: Selinux current mode is the same as the mode from config file. PASS: Both of the modes are Enforcing. PASS: selinux_check INFO: Version 38.1.65-1.el9 is within test range. Running selinux_deny_unknown test... PASS: deny_unknown is correctly set to denied (value: 1) PASS: ptrace syscall is disabled. PASS: qm is currently loaded into the SELinux policy on running image. PASS: selinux_qm_module_enabled INFO: SELinux is currently in enforcing mode and secure_mode_policyload is enabled. INFO: Attempting to switch SELinux to Permissive mode... INFO: Saving current SELinux policy... INFO: Installing the test policy to system location... INFO: Attempting to load new policy... SELinux: Could not load policy file /etc/selinux/automotive/policy/policy.33: Permission denied /sbin/load_policy: Can't load policy: Permission denied PASS: Policy load failed as expected. INFO: Saving SELinux policy after attempting to load... PASS: SELinux mode was not changed to permissive and different SELinux policy couldn't be loaded. INFO: Podman service is not enabled. PASS: disabled_podman systemd-journald is: active systemd-logind is: active systemd-sysctl is: active systemd-udevd is: active INFO: Transient_store is set to true in configuration file /etc/containers/storage.conf. PASS: transient_store PASS: The /proc is using a PID namespace PASS: The /sys is mounted as read-only filesystem PASS: The /sys/fs/selinux is mounted as read-write but it doesn't have writable files PASS: The /sys/fs/cgroup is a cgroup nested tree PASS: The /proc/acpi is mounted as read-only filesystem PASS: The /proc/kcore is mounted as read-only filesystem PASS: The /proc/keys is mounted as read-only filesystem PASS: The /proc/scsi is mounted as read-only filesystem PASS: The /proc/timer_list is mounted as read-only filesystem PASS: The /sys/firmware is mounted as read-only filesystem PASS: The /proc/interrupts is mounted as read-only filesystem PASS: The /proc/asound is mounted as read-only filesystem PASS: The /proc/bus is mounted as read-only filesystem PASS: The /proc/fs is mounted as read-only filesystem PASS: The /proc/irq is mounted as read-only filesystem PASS: The /proc/sys is mounted as read-only filesystem PASS: The /proc/sysrq-trigger is mounted as read-only filesystem PASS: The /sys/kernel/tracing is mounted as read-write but it doesn't have writable files PASS: The /sys/kernel/debug is mounted as read-write but it doesn't have writable files PASS: The /sys/fs/fuse/connections is mounted as read-write but it doesn't have writable files PASS: The /sys/kernel/config is mounted as read-write but it doesn't have writable files