24.03 LTS RISC-V k3s-install.sh 执行失败

**【标题描述】

**一、缺陷信息**

**内核信息：**
```
[openeuler@openeuler-riscv64 ~]$ uname -a
Linux openeuler-riscv64 6.6.0-27.0.0.31.oe2403.riscv64 #1 SMP Fri May 24 21:52:58 CST 2024 riscv64 riscv64 riscv64 GNU/Linux
```
**缺陷归属组件：** k3s

**缺陷归属的版本：** k3s-1.24.2+rc1+k3s2-4.oe2403

**缺陷简述：** openEuler RISC-V 24.03 LTS 下，k3s-install.sh 执行失败

**【环境信息】**

硬件信息：Sipeed Lichee Pi 4A (16GB)

软件信息
- OS版本及分支信息：openEuler 24.03 LTS, lpi4a
- 内核信息：6.6.0-27.0.0.31.oe2403.riscv64
- 发现问题的组件版本信息：k3s-1.24.2+rc1+k3s2-4.oe2403

**【问题复现步骤】**

```shell
sudo dnf install -y k3s
INSTALL_K3S_SKIP_DOWNLOAD="true" bash -x k3s-install.sh
```

**【实际结果】**

k3s 安装脚本执行失败。

k3s server 直接启动是没有问题的，安装脚本坏掉的情况下会影响相关 systemd sevice 的创建。

**【其他相关附件信息】**

```log
[openeuler@openeuler-riscv64 ~]$ INSTALL_K3S_SKIP_DOWNLOAD="true" bash -x k3s-install.sh
+ set -e
+ set -o noglob
+ GITHUB_URL=https://github.com/k3s-io/k3s/releases
+ STORAGE_URL=https://storage.googleapis.com/k3s-ci-builds
+ DOWNLOADER=
++ escape ''
++ printf %s ''
++ sed -e 's/$[][!#$%&()*;<=>?\_`{|}]$/\\\1/g;'
++ quote
+ eval set --
++ set --
+ verify_system
+ '[' -x /sbin/openrc-run ']'
+ '[' -x /bin/systemctl ']'
+ HAS_SYSTEMD=true
+ return
+ setup_env
+ case "$1" in
+ '[' -z '' ']'
+ CMD_K3S=server
+ verify_k3s_url
+ case "${K3S_URL}" in
++ quote_indent
++ printf ' \\\n'
+ CMD_K3S_EXEC='server \'
+ '[' -n '' ']'
+ '[' server = server ']'
+ SYSTEM_NAME=k3s
++ printf %s k3s
++ sed -e 's/[][!#$%&()*;<=>?\_`{|}/[:space:]]/^/g;'
+ valid_chars=k3s
+ '[' k3s '!=' k3s ']'
+ SUDO=sudo
++ id -u
+ '[' 1000 -eq 0 ']'
+ '[' -n '' ']'
+ '[' server = server ']'
+ SYSTEMD_TYPE=notify
+ '[' -n '' ']'
+ BIN_DIR=/usr/local/bin
+ sudo sh -c 'touch /usr/local/bin/k3s-ro-test && rm -rf /usr/local/bin/k3s-ro-test'
[sudo] password for openeuler: 
+ '[' -n '' ']'
+ SYSTEMD_DIR=/etc/systemd/system
+ SERVICE_K3S=k3s.service
+ UNINSTALL_K3S_SH=/usr/local/bin/k3s-uninstall.sh
+ KILLALL_K3S_SH=/usr/local/bin/k3s-killall.sh
+ '[' true = true ']'
+ FILE_K3S_SERVICE=/etc/systemd/system/k3s.service
+ FILE_K3S_ENV=/etc/systemd/system/k3s.service.env
++ get_installed_hashes
++ sudo sha256sum /usr/local/bin/k3s /etc/systemd/system/k3s.service /etc/systemd/system/k3s.service.env
++ true
+ PRE_INSTALL_HASHES='3365b9fd3c8c9aed010645b7a87b5d4113e5b77f807d5d3c8afc4130a2338c82  /usr/local/bin/k3s
sha256sum: /etc/systemd/system/k3s.service: No such file or directory
sha256sum: /etc/systemd/system/k3s.service.env: No such file or directory'
+ '[' '' = true ']'
+ INSTALL_K3S_CHANNEL_URL=https://update.k3s.io/v1-release/channels
+ INSTALL_K3S_CHANNEL=stable
+ download_and_verify
+ can_skip_download
+ '[' true '!=' true ']'
+ info 'Skipping k3s download and verify'
+ echo '[INFO] ' 'Skipping k3s download and verify'
[INFO]  Skipping k3s download and verify
+ verify_k3s_is_executable
+ '[' '!' -x /usr/local/bin/k3s ']'
+ return
+ setup_selinux
+ case ${INSTALL_K3S_CHANNEL} in
+ rpm_channel=stable
+ rpm_site=rpm.rancher.io
+ '[' stable = testing ']'
+ '[' -r /etc/os-release ']'
+ . /etc/os-release
++ NAME=openEuler
++ VERSION='24.03 (LTS)'
++ ID=openEuler
++ VERSION_ID=24.03
++ PRETTY_NAME='openEuler 24.03 (LTS)'
++ ANSI_COLOR='0;31'
+ '[' '' = suse ']'
+ '[' 24 = 7 ']'
+ rpm_target=el8
+ rpm_site_infix=centos/8
+ package_installer=yum
+ '[' yum = yum ']'
+ '[' -x /usr/bin/dnf ']'
+ package_installer=dnf
+ policy_hint='please install:
    dnf install -y container-selinux
    dnf install -y https://rpm.rancher.io/k3s/stable/common/centos/8/noarch/k3s-selinux-0.4-1.el8.noarch.rpm
'
+ '[' '' = true ']'
+ can_skip_download
+ '[' true '!=' true ']'
+ info 'Skipping installation of SELinux RPM'
+ echo '[INFO] ' 'Skipping installation of SELinux RPM'
[INFO]  Skipping installation of SELinux RPM
+ policy_error=fatal
+ '[' '' = true ']'
+ '[' '' = coreos ']'
+ '[' '' = coreos ']'
+ sudo chcon -u system_u -r object_r -t container_runtime_exec_t /usr/local/bin/k3s
+ sudo grep '^\s*SELINUX=enforcing' /etc/selinux/config
+ fatal 'Failed to apply container_runtime_exec_t to /usr/local/bin/k3s, please install:
    dnf install -y container-selinux
    dnf install -y https://rpm.rancher.io/k3s/stable/common/centos/8/noarch/k3s-selinux-0.4-1.el8.noarch.rpm
'
+ echo '[ERROR] ' 'Failed to apply container_runtime_exec_t to /usr/local/bin/k3s, please install:
    dnf install -y container-selinux
    dnf install -y https://rpm.rancher.io/k3s/stable/common/centos/8/noarch/k3s-selinux-0.4-1.el8.noarch.rpm
'
[ERROR]  Failed to apply container_runtime_exec_t to /usr/local/bin/k3s, please install:
    dnf install -y container-selinux
    dnf install -y https://rpm.rancher.io/k3s/stable/common/centos/8/noarch/k3s-selinux-0.4-1.el8.noarch.rpm

+ exit 1
[openeuler@openeuler-riscv64 ~]$
```

Note: 检查了下 SELinux 状态，目前已禁用

```log
[openeuler@openeuler-riscv64 ~]$ getenforce
Disabled
```
主要报错提示的是 `Failed to apply container_runtime_exec_t to /usr/local/bin/k3s`

`k3s` 二进制是存在且可以正常运行 `k3s server` 的

openEuler/RISC-V
关闭

内容风险标识

评论 (3)

openEuler/RISC-V关闭 .gitee-modal { width: 500px !important; }

内容风险标识