-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
False
-
None
-
False
-
Testable
-
-
-
Low
I was following my self-paced workshop for deploying FDO manually [1] and I found this issue while deploying using the simplified installer on the edge device (a VM running on libvirt):
... ignition-ostree-mount-var[827]: Unmounting /sysroot/var ignition-ostree-mount-var[833]: umount: /sysroot/var: target busy systemd[1]: ignition-ostree-mount-var.service: Main process exited, code=exited, status=32/n/a systemd[1]: ignition-ostree-mount-var.service: Failed with result 'exit-code'. ...
To know if the issue was related to FDO I tried removing the FDO section on the simplified installer blueprint... and the issue was still there... so it's not related to FDO:
name = "blueprint-iso" description = "Blueprint for simplified installer" version = "0.0.1" packages = [] modules = [] groups = [] distro = "" [customizations] installation_device = "/dev/vda"
The image blueprint used can be found here (please do not pay attention to enabling kvm on a VM with nested virtualization, that was just an example): https://raw.githubusercontent.com/luisarizmendi/tutorial-secure-onboarding/master/documentation/modules/ROOT/examples/blueprint-insights.toml
The deployment works with RHEL 9.1 but fails with 9.2 and 9.3 (probably after the ignition support) with those very same blueprints so there must be something related to the image builder or blueprint formatting that has changed.
These are the package versions when failing:
rpm -qa | grep build rpm-build-libs-4.16.1.3-22.el9.x86_64 osbuild-composer-dnf-json-88.2-1.el9_3.x86_64 osbuild-composer-core-88.2-1.el9_3.x86_64 python3-osbuild-93-1.el9.noarch osbuild-selinux-93-1.el9.noarch osbuild-93-1.el9.noarch osbuild-luks2-93-1.el9.noarch osbuild-lvm2-93-1.el9.noarch osbuild-ostree-93-1.el9.noarch osbuild-composer-worker-88.2-1.el9_3.x86_64 osbuild-composer-88.2-1.el9_3.x86_64
This is the device's kernel line when booting the simplified installer ISO:
load video
set gfxpayload-keep
insmod gzio
linux ($root)/ostree/redhat-c722bf765b81ae02adefc78f8e10155bad823a192c841fab4b58ab4aa7da4a97/um\
limuz-5.14.0-284.30.1.e19_2.x86_64 root-LABEL=root luks. uuid=a625a1f2-9318-4eed-8ba2-d81f08d4c5\
84 modprobe.blacklist-vc4 rw coreos.no_persist_ip ignition.platform.id-metal ignition.firstboot\
systemd.firstboot-off systend.condition-first-boot=true ostree=/ostree/boot.1/redhat/c722bf765\
b81ae02adefc78f8e10155bad823a192c841fab4b58ab4aa7da4a97/0
initrd ($root)/ostree/redhat-c722bf765b81ae02adefc78f8e10155bad823a192c841fab4b58ab4aa7da4a97/i\
nitramfs-5.14.0-284.30.1.e19_2.x86_64.img
[1] https://luisarizmendi.github.io/tutorial-secure-onboarding
