Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-114482

too many opened files by keylime-policy script

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • No
    • None
    • rhel-security-special-projects
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • aarch64
    • None

      What were you trying to do that didn't work?

       

      I have hit an error on aarch64... not sure what kind of system it was

      ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
      ::   Generate runtime policy from remote RPM repo with --remote-rpm-repo REPO
      ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

      :: [ 07:45:27 ] :: [  BEGIN   ] :: Running 'python3 -m http.server -b 127.0.0.1 -d "rpm/repo/signed-rsa" 8080 &'
      :: [ 07:45:27 ] :: [   PASS   ] :: Command 'python3 -m http.server -b 127.0.0.1 -d "rpm/repo/signed-rsa" 8080 &' (Expected 0, got 0)
      :: [ 07:45:27 ] :: [  BEGIN   ] :: Running 'keylime-policy create runtime --remote-rpm-repo http://localhost:8080'
      INFO:keylime.config:Reading configuration from ['/etc/keylime/logging.conf']
      127.0.0.1 - - [05/Sep/2025 07:45:27] "GET /repodata/repomd.xml HTTP/1.1" 200 -
      127.0.0.1 - - [05/Sep/2025 07:45:27] "GET /repodata/repomd.xml.asc HTTP/1.1" 200 -
      127.0.0.1 - - [05/Sep/2025 07:45:27] "GET /repodata/repomd.xml.key HTTP/1.1" 200 -
      Warning. filelist-ext.xml not present in the repo
      127.0.0.1 - - [05/Sep/2025 07:45:27] "GET /repodata/ff08df5a7b4bfccff347b201c57d37d1ddac3dc8fe06175609ef5df0e1bd9504-primary.xml.gz HTTP/1.1" 200 -
      ASC http://localhost:8080/repodata/repomd.xml.asc
      [Errno 24] Too many open files
      :: [ 07:45:28 ] :: [   FAIL   ] :: Command 'keylime-policy create runtime --remote-rpm-repo http://localhost:8080' (Expected 0, got 1)

      Would you say that maybe the script is leaving unnecessarily too many files open, leading to this error?

       

      What is the impact of this issue to you?

      keylime-create script doesn't produce valid policy

      Please provide the package NVR for which the bug is seen:

      I believe it was RHEL-9.7.

      How reproducible is this bug?:

      Steps to reproduce

      1.  run test functional/keylime-policy-commands/ from keylime-tests project
      2.  
      3.  

      Expected results

      no failure

      Actual results

      failure

              scorreia@redhat.com Sergio Correia
              ksrot@redhat.com Karel Srot
              Sergio Correia Sergio Correia
              SSG Security QE SSG Security QE
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated: