Update borked a Fedora template

User Support General
26

Having the same issue as @marcos-morar, tried everything but still can’t get template to boot with selinux enabled.

EDIT: Tried again with just the at-boot relabelling after reinstalling selinux packages and it worked.

Steps

dom0$: qvm-features $vm_name selinux 0
dom0$: qvm-start $vm_name

# finish pending update and reinstall selinux packages
vm$: sudo dnf update
vm$: sudo dnf reinstall $(rpm -qa --qf "%{NAME}\n" | grep selinux | tr '\n' ' ')
# change `/etc/selinux/config` to `SELINUX=permissive`
vm$: sudo rm /.qubes-relabeled
vm$: poweroff

dom0$: qvm-prefs $vm_name qrexec_timeout 3600
dom0$: qvm-features $vm_name selinux 1
dom0$: qvm-start $vm_name

# allow a couple mins for relabel to complete, machine will shut off automatically

dom0$: qvm-start $vm_name

vm$: # change `/etc/selinux/config` to `SELINUX=enforcing`
vm$: poweroff

dom0$: qvm-start $vm_name

vm$: sestatus #confirm it's enforcing

# optional, change timeout back to 60s
dom0$: qvm-prefs $vm_name qrexec_timeout 60
2 Likes