Customer is trying to build an image in the HCC Image Builder using a custom repository. They then add the package amazon-ssm-agent. This is required for their workflow as they use Cloudbolt to deploy it. They can create the blueprint, but once they try and build the image it fails and the status is "Image build failed". When you click on the status message you get osbuild build failed with the following details:

Unable to decode response body "{\"type\": \"error\", \"success\": false, \"error\": {\"type\": \"org.osbuild.error.stage\", \"details\": {\"stage\":

{\"id\": \"8115f29cc9f87a94bbbe47398803add0426db74cb98a820f5ac46e9436d0aca2\", \"type\": \"org.osbuild.rpm\", \"output\": \"Failed to open file \\\"/sys/fs/selinux/checkreqprot\\\": Read-only file system\\nimported gpg key\\nerror: Failed dependencies:\\n\\t/bin/sh is needed by amazon-ssm-agent-3.3.2746.0-1.x86_64\\nTraceback (most recent call last):\\n  File \\\"/run/osbuild/bin/org.osbuild.rpm\\\", line 260, in <module>\\n    r = main(args[\\\"tree\\\"], args[\\\"inputs\\\"], args[\\\"options\\\"])\\n  File \\\"/run/osbuild/bin/org.osbuild.rpm\\\", line 216, in main\\n    subprocess.run([\\n  File \\\"/usr/lib64/python3.9/subprocess.py\\\", line 528, in run\\n    raise CalledProcessError(retcode, process.args,\\nsubprocess.CalledProcessError: Command '['rpm', '--verbose', '--root', '/run/osbuild/tree', '--nosignature', '--install', '/tmp/manifest.6sd4q_h4']' returned non-zero exit status 254.\\n\", \"error\": null}

}}, \"log\": {\"build\": [

{\"id\": \"8f7d5ed584204622684f4dc1ee91b9d4b1d1a44853cb639615cb31e496339d4d\", \"type\": \"org.osbuild.rpm\", \"output\": \"Failed to open file \\\"/sys/fs/selinux/checkreqprot\\\": Read-only file system\\nimported gpg key\\nVerifying packages...\\nPreparing packages...\\nlibgcc-11.5.0-5.el9_5.x86_64\\ntzdata-2025b-1.el9.noarch\\ngawk-all-langpacks-5.1.0-6.el9.x86_64\\nncurses-base-6.2-10.20210508.el9_6.2.noarch\\npython3-setuptools-wheel-53.0.0-13.el9_6.1.noarch\\nredhat-release-eula-9.6-0.1.el9.x86_64\\nredhat-release-9.6-0.1.el9.x86_64\\nsetup-2.13.7-10.el9.noarch\\nfilesystem-3.16-5.el9.x86_64\\nbasesystem-11-13.el9.noarch\\nglibc-gconv-extra-2.34-168.el9_6.23.x86_64\\nglibc-minimal-langpack-2.34-168.el9_6.23.x86_64\\nglibc-common-2.34-168.el9_6.23.x86_64\\nglibc-2.34-168.el9_6.23.x86_64\\nncurses-libs-6.2-10.20210508.el9_6.2.x86_64\\nbash-5.1.8-9.el9.x86_64\\nzlib-1.2.11-40.el9.x86_64\\nxz-libs-5.2.5-8.el9_0.x86_64\\nlibxcrypt-4.4.18-3.el9.x86_64\\nlibuuid-2.37.4-21.el9.x86_64\\nlibzstd-1.5.5-1.el9.x86_64\\nlibcap-2.48-9.el9_2.x86_64\\nbzip2-libs-1.0.8-10.el9_5.x86_64\\nlibunistring-0.9.10-15.el9.x86_64\\ncrypto-policies-20250128-1.git5269e22.el9.noarch\\nlibsepol-3.6-2.el9.x86_64\\nlibidn2-2.3.0-7.el9.x86_64\\nlibxml2-2.9.13-12.el9_6.x86_64\\nsqlite-libs-3.34.1-8.el9_6.x86_64\\nreadline-8.1-4.el9.x86_64\\nlibattr-2.5.1-3.el9.x86_64\\nlibacl-2.3.1-4.el9.x86_64\\nlibcap-ng-0.8.2-7.el9.x86_64\\naudit-libs-3.1.5-4.el9.x86_64\\nlz4-libs-1.9.3-5.el9.x86_64\\npopt-1.18-8.el9.x86_64\\ngmp-1:6.2.0-13.el9.x86_64\\nlibffi-3.4.2-8.el9.x86_64\\nlibcom_err-1.46.5-7.el9.x86_64\\nlibtasn1-4.16.0-9.el9.x86_64\\np11-kit-0.25.3-3.el9_5.x86_64\\njson-c-0.14-11.el9.x86_64\\nlibsigsegv-2.13-4.el9.x86_64\\nlua-libs-5.4.4-4.el9.x86_64\\ngdbm-libs-1:1.23-1.el9.x86_64\\npcre-8.44-4.el9.x86_64\\ngrep-3.6-5.el9.x86_64\\nlibsmartcols-2.37.4-21.el9.x86_64\\nexpat-2.5.0-5.el9_6.x86_64\\nwhich-2.21-30.el9_6.x86_64\\nxz-5.2.5-8.el9_0.x86_64\\nmpfr-4.1.0-7.el9.x86_64\\ngawk-5.1.0-6.el9.x86_64\\nacl-2.3.1-4.el9.x86_64\\nlibxcrypt-compat-4.4.18-3.el9.x86_64\\nfile-libs-5.39-16.el9.x86_64\\nfile-5.39-16.el9.x86_64\\npigz-2.8-1.el9.x86_64\\nsystemd-rpm-macros-252-51.el9_6.1.noarch\\nlibedit-3.1-38.20210216cvs.el9.x86_64\\ncpio-2.13-16.el9.x86_64\\nlibaio-0.3.111-13.el9.x86_64\\nlibgpg-error-1.42-5.el9.x86_64\\nlibgcrypt-1.10.0-11.el9.x86_64\\nlibseccomp-2.5.2-2.el9.x86_64\\nlibverto-0.3.2-3.el9.x86_64\\nuserspace-rcu-0.12.1-6.el9.x86_64\\ndiffutils-3.7-12.el9.x86_64\\ninih-49-6.el9.x86_64\\nkeyutils-libs-1.6.3-1.el9.x86_64\\nlibeconf-0.4.1-4.el9.x86_64\\nlibnghttp2-1.43.0-6.el9.x86_64\\nlibbrotli-1.0.9-7.el9_5.x86_64\\nlibgomp-11.5.0-5.el9_5.x86_64\\nlibstdc++-11.5.0-5.el9_5.x86_64\\ngettext-libs-0.21-8.el9.x86_64\\ngettext-0.21-8.el9.x86_64\\nalternatives-1.24-2.el9.x86_64\\np11-kit-trust-0.25.3-3.el9_5.x86_64\\nfuse-libs-2.9.9-17.el9.x86_64\\nlibtool-ltdl-2.4.6-46.el9.x86_64\\nnettle-3.10.1-1.el9.x86_64\\ngnutls-3.8.3-6.el9.x86_64\\nnumactl-libs-2.0.19-1.el9.x86_64\\nlibdb-5.3.28-57.el9_6.x86_64\\nliburing-2.5-1.el9.x86_64\\nkbd-misc-2.4.0-11.el9.noarch\\nkbd-legacy-2.4.0-11.el9.noarch\\ncoreutils-common-8.32-39.el9.x86_64\\npcre2-syntax-10.40-6.el9.noarch\\npcre2-10.40-6.el9.x86_64\\nlibselinux-3.6-3.el9.x86_64\\nsed-4.8-9.el9.x86_64\\nopenssl-fips-provider-so-3.0.7-6.el9_5.x86_64\\nopenssl-fips-provider-3.0.7-6.el9_5.x86_64\\nopenssl-libs-1:3.2.2-6.el9_5.1.x86_64\\ncoreutils-8.32-39.el9.x86_64\\nca-certificates-2024.2.69_v8.0.303-91.4.el9_4.noarch\\nlibblkid-2.37.4-21.el9.x86_64\\nsystemd-libs-252-51.el9_6.1.x86_64\\nlibmount-2.37.4-21.el9.x86_64\\nutil-linux-core-2.37.4-21.el9.x86_64\\nlibfdisk-2.37.4-21.el9.x86_64\\nkrb5-libs-1.21.1-8.el9_6.x86_64\\nkmod-28-10.el9.x86_64\\nkmod-libs-28-10.el9.x86_64\\ngzip-1.12-1.el9.x86_64\\ncracklib-2.9.6-27.el9.x86_64\\nlibsemanage-3.6-5.el9_6.x86_64\\nshadow-utils-2:4.9-12.el9.x86_64\\nlibutempter-1.2.1-6.el9.x86_64\\ncracklib-dicts-2.9.6-27.el9.x86_64\\ncyrus-sasl-lib-2.1.27-21.el9.x86_64\\nglib2-2.68.4-16.el9_6.2.x86_64\\nprocps-ng-3.3.17-14.el9.x86_64\\npython3-pip-wheel-21.3.1-1.el9.noarch\\npython-unversioned-command-3.9.21-2.el9_6.1.noarch\\npython3-3.9.21-2.el9_6.1.x86_64\\npython3-libs-3.9.21-2.el9_6.1.x86_64\\npython3-six-1.15.0-9.el9.noarch\\nopenssl-1:3.2.2-6.el9_5.1.x86_64\\nlibpwquality-1.4.4-8.el9.x86_64\\npam-1.5.1-25.el9_6.x86_64\\nutil-linux-2.37.4-21.el9.x86_64\\ndbus-1:1.12.20-8.el9.x86_64\\nsystemd-pam-252-51.el9_6.1.x86_64\\nsystemd-252-51.el9_6.1.x86_64\\ndbus-common-1:1.12.20-8.el9.noarch\\nCreated symlink /etc/systemd/system/sockets.target.wants/dbus.socket \\u2192 /usr/lib/systemd/system/dbus.socket.\\nCreated symlink /etc/systemd/user/sockets.target.wants/dbus.socket \\u2192 /usr/lib/systemd/user/dbus.socket.\\ndbus-broker-28-7.el9.x86_64\\nCreated symlink /etc/systemd/system/dbus.service \\u2192 /usr/lib/systemd/system/dbus-broker.service.\\nCreated symlink /etc/systemd/user/dbus.service \\u2192 /usr/lib/systemd/user/dbus-broker.service.\\ngrub2-common-1:2.06-104.el9_6.noarch\\ngrub2-pc-modules-1:2.06-104.el9_6.noarch\\nlibkcapi-1.4.0-2.el9.x86_64\\nlibkcapi-hmaccalc-1.4.0-2.el9.x86_64\\ndevice-mapper-libs-9:1.02.202-6.el9.x86_64\\ndevice-mapper-9:1.02.202-6.el9.x86_64\\ngrub2-tools-minimal-1:2.06-104.el9_6.x86_64\\nkpartx-0.8.7-35.el9_6.1.x86_64\\ncryptsetup-libs-2.7.2-3.el9_6.1.x86_64\\nkbd-2.4.0-11.el9.x86_64\\nlibevent-2.1.12-8.el9_4.x86_64\\nopenldap-2.6.8-4.el9.x86_64\\nlibarchive-3.5.3-6.el9_6.x86_64\\nfindutils-1:4.8.0-7.el9.x86_64\\nlibselinux-utils-3.6-3.el9.x86_64\\nlibssh-config-0.10.4-13.el9.noarch\\nlibssh-0.10.4-13.el9.x86_64\\npublicsuffix-list-dafsa-20210518-3.el9.noarch\\nlibpsl-0.21.1-5.el9.x86_64\\nlibcurl-7.76.1-31.el9_6.1.x86_64\\ntpm2-tss-3.2.3-1.el9.x86_64\\nsystemd-udev-252-51.el9_6.1.x86_64\\nCreated symlink /etc/systemd/system/sysinit.target.wants/systemd-boot-update.service \\u2192 /usr/lib/systemd/system/systemd-boot-update.service.\\nCreated symlink /etc/systemd/system/sysinit.target.wants/systemd-pstore.service \\u2192 /usr/lib/systemd/system/systemd-pstore.service.\\ndracut-057-88.git20250311.el9_6.x86_64\\nos-prober-1.77-12.el9_5.x86_64\\ngrub2-tools-1:2.06-104.el9_6.x86_64\\ncurl-7.76.1-31.el9_6.1.x86_64\\nrpm-libs-4.16.1.3-37.el9.x86_64\\nrpm-4.16.1.3-37.el9.x86_64\\npolicycoreutils-3.6-2.1.el9.x86_64\\nCreated symlink /etc/systemd/system/sysinit.target.wants/selinux-autorelabel-mark.service \\u2192 /usr/lib/systemd/system/selinux-autorelabel-mark.service.\\nselinux-policy-38.1.53-5.el9_6.noarch\\nselinux-policy-targeted-38.1.53-5.el9_6.noarch\\nrpm-plugin-selinux-4.16.1.3-37.el9.x86_64\\ngrub2-pc-1:2.06-104.el9_6.x86_64\\nxfsprogs-6.4.0-5.el9.x86_64\\npython3-iniparse-0.4-45.el9.noarch\\nqemu-img-17:9.1.0-15.el9_6.7.x86_64\\ndosfstools-4.2-3.el9.x86_64\\n\"}

,

{\"id\": \"4081f6bd22288e8b46dd2c30ac8479b865cf65082b3f9f2ddca91355e941c7a4\", \"type\": \"org.osbuild.selinux\", \"output\": \"Failed to open file \\\"/sys/fs/selinux/checkreqprot\\\": Read-only file system\\n\"}

], \"os\": [

{\"id\": \"29de0bb658c553a8c2c903f78f9652a454bc0365b679c8572d3b9f1343744e9a\", \"type\": \"org.osbuild.kernel-cmdline\", \"output\": \"Failed to open file \\\"/sys/fs/selinux/checkreqprot\\\": Read-only file system\\n\"}

,

{\"id\": \"8115f29cc9f87a94bbbe47398803add0426db74cb98a820f5ac46e9436d0aca2\", \"type\": \"org.osbuild.rpm\", \"output\": \"Failed to open file \\\"/sys/fs/selinux/checkreqprot\\\": Read-only file system\\nimported gpg key\\nerror: Failed dependencies:\\n\\t/bin/sh is needed by amazon-ssm-agent-3.3.2746.0-1.x86_64\\nTraceback (most recent call last):\\n  File \\\"/run/osbuild/bin/org.osbuild.rpm\\\", line 260, in <module>\\n    r = main(args[\\\"tree\\\"], args[\\\"inputs\\\"], args[\\\"options\\\"])\\n  File \\\"/run/osbuild/bin/org.osbuild.rpm\\\", line 216, in main\\n    subprocess.run([\\n  File \\\"/usr/lib64/python3.9/subprocess.py\\\", line 528, in run\\n    raise CalledProcessError(retcode, process.args,\\nsubprocess.CalledProcessError: Command '['rpm', '--verbose', '--root', '/run/osbuild/tree', '--nosignature', '--install', '/tmp/manifest.6sd4q_h4']' returned non-zero exit status 254.\\n\", \"success\": false}

]}}\ncannot run osbuild: exit status 1" into osbuild result: invalid character 'c' after top-level value