users April 2025

users@lists.fedoraproject.org

75 participants
78 discussions

Post-F42-Upgrade Error Messages
by Tim Evans 28 Apr '25

28 Apr '25

Since doing F41->F42 upgrades on a couple of my systems, I'm getting error messages (on both) like these when doing dnf upgrades. They reference different specific reasons, however, for the failure to merge. >>> Running trigger-post-uninstall scriptlet: filesystem-0:3.18-36.fc42.x86_64 /usr/sbin cannot be merged, /usr/sbin/editmap points to /etc/alternatives/mta-editmap >>> Running trigger-post-uninstall scriptlet: filesystem-0:3.18-36.fc42.x86_64 /usr/sbin cannot be merged, Found /usr/sbin/dm_dso_reg_tool

4 3

script(1) missing from fedora42
by Alex 28 Apr '25

28 Apr '25

Hi, I've just upgraded from f40 to f42 and noticed /usr/bin/script is no longer part of util-linux. Where can I find it? It also seems the typescript package is completely different, so that's not it, lol. Thanks, Alex

3 3

about systemd-resolved
by François Patte 28 Apr '25

28 Apr '25

Bonjour, I am a little bit confused about the dns : I have systemd-resolved installed and when I list the content of the package (rpm -ql), I can read on the first line: /etc/systemd/resolved.conf But there is no /etc/systemd/resolved.conf There is a /usr/lib/systemd/resolved.conf but it is a file the lines of whitch are all commented... There is a /usr/sbin/resolvconf and a man for this, so I tried to use this resolvconf and read the man... Under the OPTIONS : " -i INTERFACE, --interface=INTERFACE Specifies the network interface to execute the query on. This may either be specified as numeric interface index or as network interface string (e.g. "en0")" So, I tried resolvconf -i eno1 and... Switch -i not supported lol! I can see that /usr/sbin/resolvconf is a symbolic link to ../bin/resolvectl Trying to use resolvectl I get: Global Protocols: LLMNR=resolve -mDNS -DNSOverTLS DNSSEC=no/unsupported resolv.conf mode: stub Link 2 (eno1) Current Scopes: DNS LLMNR/IPv4 LLMNR/IPv6 Protocols: +DefaultRoute LLMNR=resolve -mDNS -DNSOverTLS DNSSEC=no/unsupported Current DNS Server: 192.168.1.1 DNS Servers: 80.67.169.12 80.67.169.40 192.168.1.1 DNS Domain: home Link 3 (wlp6s0) Current Scopes: none Protocols: -DefaultRoute LLMNR=resolve -mDNS -DNSOverTLS DNSSEC=no/unsupported Well! But where is the config file where all this is defined? That's a mystery! It seems that (at least) two systems are install for the dns but is there a way to see what is the one in use and how can I -- safely -- configure the dns system on my machine to use DNSOverTLS? Thank you for helping. F.P.

7 16

Fedora 41->42 hangs at 31% done
by richard emberson 28 Apr '25

28 Apr '25

Upgrading my systems from 41 to 42. Three laptops and media server went smoothly. So, decided to upgrade my desktop (main) machine: # dnf upgrade --refresh Success # reboot Success # dnf install dnf-plugin-system-upgrade Repositories loaded. Package "dnf-plugins-core-4.10.1-1.fc41.noarch" is already installed. Success # dnf system-upgrade download --releasever=42 .... use "dnf5 offline reboot" ... Just like other machines, seems to be Success. # dnf5 offline reboot ...time passes ... stops at 31% completed .. Waited 2 1/2 hours, did reboot by hardware button got me back to 41: uname -a Linux olympia 6.13.11-200.fc41.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Apr 10 19:02:09 UTC 2025 x86_64 GNU/Linux When I do a: # dnf list --installed | grep kernel abrt-addon-kerneloops.x86_64 2.17.6-3.fc41 updates kernel.x86_64 6.11.4-301.fc41 anaconda kernel.x86_64 6.11.11-300.fc41 updates kernel.x86_64 6.13.11-200.fc41 updates kernel-core.x86_64 6.11.4-301.fc41 anaconda kernel-core.x86_64 6.11.11-300.fc41 updates kernel-core.x86_64 6.13.11-200.fc41 updates kernel-core.x86_64 6.14.2-300.fc42 <unknown> kernel-headers.x86_64 6.13.3-200.fc41 updates kernel-headers.x86_64 6.14.0-63.fc42 <unknown> kernel-modules.x86_64 6.11.4-301.fc41 anaconda kernel-modules.x86_64 6.11.11-300.fc41 updates kernel-modules.x86_64 6.13.11-200.fc41 updates kernel-modules.x86_64 6.14.2-300.fc42 <unknown> kernel-modules-core.x86_64 6.11.4-301.fc41 anaconda kernel-modules-core.x86_64 6.11.11-300.fc41 updates kernel-modules-core.x86_64 6.13.11-200.fc41 updates kernel-modules-core.x86_64 6.14.2-300.fc42 <unknown> kernel-modules-extra.x86_64 6.11.4-301.fc41 anaconda kernel-modules-extra.x86_64 6.11.11-300.fc41 updates kernel-modules-extra.x86_64 6.13.11-200.fc41 updates libreport-plugin-kerneloops.x86_64 2.17.15-3.fc41 anaconda The last couple of lines in /var/log/dnf5.log: 2025-04-20T17:03:15+0000 [745] INFO RPM callback install stop "python3-brotli-0:1.1.0-6.fc42.x86_64" amount 858484 total 858484 2025-04-20T17:03:15+0000 [745] INFO RPM callback close file 2025-04-20T17:03:15+0000 [745] INFO RPM callback open file "/usr/lib/sysimage/libdnf5/offline/./packages/python3-certifi-2024.08.30-2.fc42.noarch.rpm" 2025-04-20T17:03:15+0000 [745] INFO RPM callback install start "python3-certifi-0:2024.08.30-2.fc42.noarch" total 10604 2025-04-20T17:03:15+0000 [745] INFO RPM callback install stop "python3-certifi-0:2024.08.30-2.fc42.noarch" amount 10604 total 10604 2025-04-20T17:03:15+0000 [745] INFO RPM callback close file 2025-04-20T17:03:15+0000 [745] INFO RPM callback open file "/usr/lib/sysimage/libdnf5/offline/./packages/python3-chardet-5.2.0-16.fc42.noarch.rpm" 2025-04-20T17:03:15+0000 [745] INFO RPM callback install start "python3-chardet-0:5.2.0-16.fc42.noarch" total 2194948 2025-04-20T17:03:15+0000 [745] INFO RPM callback install stop "python3-chardet-0:5.2.0-16.fc42.noarch" amount 2194948 total 2194948 2025-04-20T17:03:16+0000 [745] INFO RPM callback start trigger-install scriptlet "filesystem-0:3.18-36.fc42.x86_64" 2025-04-20T17:03:16+0000 [745] INFO RPM callback stop trigger-install scriptlet "filesystem-0:3.18-36.fc42.x86_64" return code 0 2025-04-20T17:03:17+0000 [745] INFO RPM callback close file 2025-04-20T17:03:17+0000 [745] INFO RPM callback open file "/usr/lib/sysimage/libdnf5/offline/./packages/python3-click-8.1.7-7.fc42.noarch.rpm" No error messages. I have not tried to upgrade from 41 to 42 again. If possible I'd like to know what went wrong first. From recent experience, it is a real pain to reinstall on this OLD system (if you have to replace the boot disk, had to install DVD mint 2.0 on new disk in order to get /boot/efi/EFI/BOOT directory, then install DVD Xfce 4.1), so, why would the upgrade hang? Thanks Also, now when I change to root I get: # su Password: /etc/selinux/targeted/contexts/files/file_contexts.bin: Old compiled fcontext format, skipping /etc/selinux/targeted/contexts/files/file_contexts.homedirs.bin: Old compiled fcontext format, skipping /etc/selinux/targeted/contexts/files/file_contexts.local.bin: Old compiled fcontext format, skipping Rich

4 7

Curse the login screen!
by Beartooth 28 Apr '25

28 Apr '25

My spouse & I live in our own house, just the two of us, and such visitors as appear are adult friends. We've been running Fedora since it was RedHat7, with never a login screen. Nor has that absence ever made trouble. Now F42 has inflicted one on our every PC. We HATE it. How do we get rid of it?? -- Beartooth Staffwright, Not Quite Clueless Power User Remember I know little (precious little!) of where up is.

12 24

why is a reboot needed before upgrading?
by Ranjan Maitra 28 Apr '25

28 Apr '25

According to the first step here https://docs.fedoraproject.org/en-US/quick-docs/upgrading-fedora-offline/ a reboot is needed before proceeding with the upgrade. Just curious why? In the past, I did not reboot for days, but it did not matter and things went smoothly for the upgrade. Many thanks and best wishes, Ranjan

9 17

Problem for SORT command gurus
by Philip Rhoades 27 Apr '25

27 Apr '25

People, For the attached file these work: sort -k 1.11,1.18n t sort -k 1.3,1.6n t but this doesn't: sort -k 1.8 -k 1.3,1.6n t Why is this? Thanks, Phil. -- Philip Rhoades PO Box 896 Cowra NSW 2794 Australia E-mail: phil(a)pricom.com.au

2 6

list/email -- toppost -- off topic..
by Iosif Fettich 27 Apr '25

27 Apr '25

> You can create your own rulesets for that. Does gmail support + > addresses? Yep. Best, Iosif Fettich

2 1

SELINUX_ERR op=security_compute_sid invalid_context while running /etc/init.d script of my app
by chaitanya singh 26 Apr '25

26 Apr '25

Doing this on a RHEL8.10 distro. I've created a user with staff_u role: # useradd -Z staff_u testadm And provided this user elevated permissions, for which did following steps: 1. created: /etc/sudoers.d/mysudoers 2. added this: %testadm ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL Did reboot. Installed my app's selinux policy module(rpm). Then logged in with this testadm user, and ran command to elevate to sysadm_r:sysadm_t: # sudo runcon -r sysadm_r -t sysadm_t -- su - Now, on this console, with selinux Enforcing, I try running my application's executable (maconfig) and I'm getting this permission denied error: [root@6H0RHEL810 ~]# /opt/McAfee/agent/bin/maconfig -stop 2025-04-25 11:43:12.768 (50811.50811) maconfig.Info: Stopping Trellix agent. sh: /etc/init.d/ma: /bin/sh: bad interpreter: Permission denied 2025-04-25 11:43:12.770 (50811.50811) maconfig.Info: configuration finished So naturally, I looked for denials in var/log/audit/audit.log but got this instead: type=SELINUX_ERR msg=audit(1745581392.769:2056): op=security_compute_sid invalid_context="staff_u:system_r:initrc_t:s0" scontext=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:initrc_exec_t:s0 tclass=process type=SYSCALL msg=audit(1745581392.769:2056): arch=c000003e syscall=59 success=no exit=-13 a0=5587d7a7b540 a1=5587d7a7c700 a2=5587d7a79e40 a3=0 items=0 ppid=50811 pid=50812 auid=1001 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=8 comm="sh" exe="/usr/bin/bash" subj=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=execve AUID="testadm" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1745581392.769:2056): proctitle=7368002D63002F6574632F696E69742E642F6D612073746F70 ..which is not a straighforward avc denial. So searched for ways to tackle this. Found the explanation for the log - a process running as sysadm_t (maconfig) tried to run a file labeled initrc_exec_t (/etc/init.d/ma - my application's script), and SELinux said "nope" because it would result in an invalid context transition to initrc_t. So tried a couple of other things: -Switched selinux to Permissive mode, got some user_avc denials. Added rules in policy for allowing those, but didn't work. -Added this domain transition rule to my policy (didn't work): domain_auto_trans(sysadm_t, initrc_exec_t, initrc_t); -Tried adding these role-type statements in policy (which I thought would work for sure but nope): require { role system_r, sysadm_r } role system_r types initrc_t; #AND role sysadm_r types initrc_t; Also got to know some more stuff from these pages https://wiki.gentoo.org/wiki/SELinux/Tutorials/Linux_services_and_the_syste… https://github.com/SELinuxProject/selinux-notebook/blob/main/src/auditing.md ..but still not sure how to proceed. Pls help out if u can. Thanks in advance!

2 3

Reboot for upgrade
by Frank Elsner 26 Apr '25

26 Apr '25

Hi community, https://docs.fedoraproject.org/en-US/quick-docs/upgrading-fedora-offline/ recommends "dnf system-upgrade reboot" but after dnf system-upgrade download --releasever=42 the output states "dnf5 offline reboot" to perform the upgrade. What's th correct command to use? Happy weekend, Frank

3 3