selinux error on fedora 41

[martinus]

Error

Error: 
   0: Install failure
   1: Error executing action
   2: Action `provision_selinux` errored
   3: Failed to execute command `"semodule" "--install" "/usr/share/selinux/packages/nix.pp"`
      stdout: 
      stderr: Failed to resolve typeattributeset statement at /var/lib/selinux/targeted/tmp/modules/200/snappy/cil:222
      Failed to resolve AST
      semodule:  Failed!

   3: exited with status code: 1

Metadata

key	value
version	0.30.1
os	linux
arch	x86_64

[martinus]

It appears that issue was caused by leftover stuff from fedora system upgrade. I had to

1. remove the problematic selinux modules (see https://bugzilla.redhat.com/show_bug.cgi?id=2069325#c6):

   sudo semodule -X 300 -r my-snapd -X 200 -r snappy

2. Manually remove the nix.pp file from the nix-installer (or it fails when trying to remove the nix module):

   sudo rm /usr/share/selinux/packages/nix.pp

And then run the installer again

[cole-h]

Thanks for documenting how you got this fixed! Do you have any more information on "or it fails when trying to remove the nix module"? We could probably make that nicer if you can provide the logs / errors you encountered.

[martinus]

Do you have any more information on "or it fails when trying to remove the nix module"?

When I did not remove the /usr/share/selinux/packages/nix.pp, nix-installer seems to think that it has already installed some selinux stuff (which it hasn't, it seems to have only copied that file there) and then fails while trying to uninstall the selinux file. Thus I had to manually remove the file

I don't have the error message any more unfortunately, I think it tried to do selinux --remove nix which fails