Error with dnf upgrade, upgrading in place from F35 to F36 Beta

,

Hello everyone,

I’ve been trying to investigate the following problem:
I run sudo dnf upgrade and I get the Error: Transaction failed.

I was able to successfully upgrade from Fedora 35 to Fedora 36 Beta

  • As in, I was able to boot, login, and use various apps.

But sudo dnf upgrade doesn’t upgrade all packages successfully.

I’m copying the entire output here:

╭─    ~ ▓▒░────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────░▒▓ 1 ✘  at 04:50:53 PM  ─╮
╰─ sudo dnf upgrade --refresh                                                                                                                                                              ─╯
1Password Beta Channel                                                                                                                                         17 kB/s | 3.0 kB     00:00    
Copr repo for g810-led owned by lkiesow                                                                                                                       6.2 kB/s | 3.3 kB     00:00    
Copr repo for gnome-shell-mutter-tripplebuffered-41 owned by shrisha                                                                                          638  B/s | 341  B     00:00    
Errors during downloading metadata for repository 'copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41':
  - Status code: 404 for https://download.copr.fedorainfracloud.org/results/shrisha/gnome-shell-mutter-tripplebuffered-41/fedora-36-x86_64/repodata/repomd.xml (IP: 2600:9000:2146:f600:4:bbc1:1840:93a1)
Error: Failed to download metadata for repo 'copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Copr repo for PyCharm owned by phracek                                                                                                                        9.3 kB/s | 3.3 kB     00:00    
Docker CE Stable - x86_64                                                                                                                                     573  B/s | 384  B     00:00    
Errors during downloading metadata for repository 'docker-ce-stable':
  - Status code: 404 for https://download.docker.com/linux/fedora/36/x86_64/stable/repodata/repomd.xml (IP: 2600:9000:2146:e400:3:db06:4200:93a1)
Error: Failed to download metadata for repo 'docker-ce-stable': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Fedora 36 - x86_64                                                                                                                                             23 kB/s | 8.6 kB     00:00    
Fedora 36 openh264 (From Cisco) - x86_64                                                                                                                      2.9 kB/s | 989  B     00:00    
Fedora Modular 36 - x86_64                                                                                                                                     27 kB/s |  12 kB     00:00    
Fedora 36 - x86_64 - Updates                                                                                                                                   33 kB/s |  15 kB     00:00    
Fedora Modular 36 - x86_64 - Updates                                                                                                                           33 kB/s |  15 kB     00:00    
Fedora 36 - x86_64 - Test Updates                                                                                                                              21 kB/s | 9.3 kB     00:00    
Fedora Modular 36 - x86_64 - Test Updates                                                                                                                      31 kB/s |  13 kB     00:00    
insync repo                                                                                                                                                   611  B/s | 300  B     00:00    
Errors during downloading metadata for repository 'insync':
  - Status code: 404 for http://yum.insync.io/fedora/36/repodata/repomd.xml (IP: 52.216.242.28)
Error: Failed to download metadata for repo 'insync': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
microsoft-edge                                                                                                                                                8.5 kB/s | 3.0 kB     00:00    
RPM Fusion for Fedora 36 - Free                                                                                                                                16 kB/s | 5.6 kB     00:00    
RPM Fusion for Fedora 36 - Free tainted                                                                                                                        16 kB/s | 5.3 kB     00:00    
RPM Fusion for Fedora 36 - Free - Test Updates                                                                                                                 15 kB/s | 5.4 kB     00:00    
RPM Fusion for Fedora 36 - Nonfree                                                                                                                             15 kB/s | 5.5 kB     00:00    
RPM Fusion for Fedora 36 - Nonfree - NVIDIA Driver                                                                                                             16 kB/s | 5.6 kB     00:00    
RPM Fusion for Fedora 36 - Nonfree - Steam                                                                                                                     16 kB/s | 5.4 kB     00:00    
RPM Fusion for Fedora 36 - Nonfree tainted                                                                                                                     16 kB/s | 5.4 kB     00:00    
RPM Fusion for Fedora 36 - Nonfree - Test Updates                                                                                                              14 kB/s | 5.1 kB     00:00    
Scooter Software                                                                                                                                              7.8 kB/s | 2.9 kB     00:00    
slack                                                                                                                                                         3.8 kB/s | 1.8 kB     00:00    
Sublime Text - x86_64 - Stable                                                                                                                                6.7 kB/s | 2.9 kB     00:00    
vivaldi                                                                                                                                                        21 kB/s | 2.9 kB     00:00    
Visual Studio Code                                                                                                                                             14 kB/s | 3.0 kB     00:00    
ZFS on Linux for Fedora 36                                                                                                                                    759  B/s | 243  B     00:00    
Errors during downloading metadata for repository 'zfs':
  - Status code: 403 for http://download.zfsonlinux.org/fedora/36/x86_64/repodata/repomd.xml (IP: 2600:1fa0:406c:1089:34da:ec99::)
Error: Failed to download metadata for repo 'zfs': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41, docker-ce-stable, insync, zfs
Dependencies resolved.
==============================================================================================================================================================================================
 Package                                  Architecture                       Version                                                        Repository                                   Size
==============================================================================================================================================================================================
Upgrading:
 flatpak                                  x86_64                             1.12.6-1.fc36                                                  updates-testing                             1.6 M
 snap-confine                             x86_64                             2.54.4-1.fc36                                                  updates-testing                             2.2 M
 snapd                                    x86_64                             2.54.4-1.fc36                                                  updates-testing                              13 M
 swtpm                                    x86_64                             0.7.2-1.20220307git21c90c1.fc36                                updates-testing                              42 k

Transaction Summary
==============================================================================================================================================================================================
Upgrade  4 Packages

Total download size: 17 M
Is this ok [y/N]: y
Downloading Packages:
(1/4): swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64.rpm                                                                                                       239 kB/s |  42 kB     00:00    
(2/4): flatpak-1.12.6-1.fc36.x86_64.rpm                                                                                                                       172 kB/s | 1.6 MB     00:09    
(3/4): snap-confine-2.54.4-1.fc36.x86_64.rpm                                                                                                                  173 kB/s | 2.2 MB     00:12    
(4/4): snapd-2.54.4-1.fc36.x86_64.rpm                                                                                                                         211 kB/s |  13 MB     01:03    
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                         270 kB/s |  17 MB     01:04     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                                                      1/1 
  Upgrading        : snap-confine-2.54.4-1.fc36.x86_64                                                                                                                                    1/8 
error: lsetfilecon: (/usr/libexec/snapd/snap-confine;6232783d, system_u:object_r:snappy_confine_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed

Error unpacking rpm package snap-confine-2.54.4-1.fc36.x86_64
  Upgrading        : snapd-2.54.4-1.fc36.x86_64                                                                                                                                           2/8 
error: unpacking of archive failed on file /usr/libexec/snapd/snap-confine;6232783d: cpio: (error 0x2)
error: snap-confine-2.54.4-1.fc36.x86_64: install failed
error: lsetfilecon: (/etc/sysconfig/snapd;6232783d, system_u:object_r:snappy_config_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed

Error unpacking rpm package snapd-2.54.4-1.fc36.x86_64
  Upgrading        : swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64                                                                                                                         3/8 
error: unpacking of archive failed on file /etc/sysconfig/snapd;6232783d: cpio: (error 0x2)
error: snapd-2.54.4-1.fc36.x86_64: install failed
error: lsetfilecon: (/usr/bin/swtpm;6232783d, system_u:object_r:swtpm_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed

Error unpacking rpm package swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64
  Running scriptlet: flatpak-1.12.6-1.fc36.x86_64                                                                                                                                         4/8 
error: unpacking of archive failed on file /usr/bin/swtpm;6232783d: cpio: (error 0x2)
error: swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64: install failed

  Upgrading        : flatpak-1.12.6-1.fc36.x86_64                                                                                                                                         4/8 
error: lsetfilecon: (/usr/libexec/flatpak-system-helper;6232783d, system_u:object_r:flatpak_helper_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed

Error unpacking rpm package flatpak-1.12.6-1.fc36.x86_64
  Verifying        : flatpak-1.12.6-1.fc36.x86_64                                                                                                                                         1/8 
  Verifying        : flatpak-1.12.6-1.fc35.x86_64                                                                                                                                         2/8 
  Verifying        : snap-confine-2.54.4-1.fc36.x86_64                                                                                                                                    3/8 
  Verifying        : snap-confine-2.54.3-1.fc36.x86_64                                                                                                                                    4/8 
  Verifying        : snapd-2.54.4-1.fc36.x86_64                                                                                                                                           5/8 
  Verifying        : snapd-2.54.3-1.fc35.x86_64                                                                                                                                           6/8 
  Verifying        : swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64                                                                                                                         7/8 
  Verifying        : swtpm-0.7.1-1.20220218git92a7035.fc35.x86_64                                                                                                                         8/8 

Failed:
  flatpak-1.12.6-1.fc35.x86_64  flatpak-1.12.6-1.fc36.x86_64                  snap-confine-2.54.3-1.fc36.x86_64             snap-confine-2.54.4-1.fc36.x86_64  snapd-2.54.3-1.fc35.x86_64 
  snapd-2.54.4-1.fc36.x86_64    swtpm-0.7.1-1.20220218git92a7035.fc35.x86_64  swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64 

Error: Transaction failed

I’ve tried various steps here:
https://docs.fedoraproject.org/en-US/quick-docs/dnf-system-upgrade/

I’m not certain how to proceed.

Side note:

  • I am using ZSH shell, with powerlevel10k theme

Hey there! What happens when you do a

sudo dnf update

instead?

You do realize that fedora 36 is still in testing and is not yet even in beta.

You can expect problems when you try running a testing version since it is still in development.

In general, the likely fix would be to disable all 3rd party repos since most of them are not ready for fedora 36.

1 Like

Wait f36 will be available in public beta and this small issues will be fix and as far as i know public beta will be in next week or so. So you have to wait and it is not recommended to install testing image in production system you will face issues

I’m on F36 now, to help test it before the beta release and I have not seen these issues—but I don’t have snap etc. installed. So it really could just be issues with third party packages as Jeff noted.

Could you give us the output of sudo dnf repolist please?

1 Like

I have the same issue. Snapd, Flatpak, Podman etc failed to upgrade on Fedora 36. They are stuck on Fedora 35 versions. Something about SELinux in the error message. I don’t think it has anything to do with third party packages.

404 means document not found.
If you put the URL in your web-browser it says the key is missing:

<Error>
<Code>NoSuchKey</Code>
<Message>The specified key does not exist.</Message>
<Key>fedora/36/repodata/repomd.xml</Key>
<RequestId>F1ZJV1R9FXJ8T9R6</RequestId>
<HostId>
RJB1xWv1oZ7tIiZ1lFL9htGM5rC1dqZ8rvbZ7SY4m012VMTcnN+iQ2rLPJEYT3vidnT0no8nn8U=
</HostId>
</Error>

For me seams not ready for F36 yet.

Thank you for taking a look.
This is the output.

╭─    ~ ▓▒░────────────────────────────────────░▒▓ ✔  at 09:03:34 AM  ─╮
╰─ sudo dnf update                                                           ─╯
Copr repo for gnome-shell-mutter-tripplebuffere 501  B/s | 341  B     00:00    
Errors during downloading metadata for repository 'copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41':
  - Status code: 404 for https://download.copr.fedorainfracloud.org/results/shrisha/gnome-shell-mutter-tripplebuffered-41/fedora-36-x86_64/repodata/repomd.xml (IP: 2600:9000:2164:e600:4:bbc1:1840:93a1)
Error: Failed to download metadata for repo 'copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Docker CE Stable - x86_64                       596  B/s | 384  B     00:00    
Errors during downloading metadata for repository 'docker-ce-stable':
  - Status code: 404 for https://download.docker.com/linux/fedora/36/x86_64/stable/repodata/repomd.xml (IP: 2600:9000:234d:800:3:db06:4200:93a1)
Error: Failed to download metadata for repo 'docker-ce-stable': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Fedora 36 - x86_64                               18 kB/s |  11 kB     00:00    
Fedora 36 - x86_64                              1.4 MB/s | 1.7 MB     00:01    
Fedora Modular 36 - x86_64                       29 kB/s |  13 kB     00:00    
Fedora Modular 36 - x86_64                      114 kB/s | 158 kB     00:01    
Fedora 36 - x86_64 - Updates                     34 kB/s |  15 kB     00:00    
Fedora Modular 36 - x86_64 - Updates             32 kB/s |  15 kB     00:00    
Fedora 36 - x86_64 - Test Updates                28 kB/s |  12 kB     00:00    
Fedora Modular 36 - x86_64 - Test Updates        31 kB/s |  13 kB     00:00    
insync repo                                     565  B/s | 300  B     00:00    
Errors during downloading metadata for repository 'insync':
  - Status code: 404 for http://yum.insync.io/fedora/36/repodata/repomd.xml (IP: 52.217.226.49)
Error: Failed to download metadata for repo 'insync': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
RPM Fusion for Fedora 36 - Free tainted          14 kB/s | 4.8 kB     00:00    
ZFS on Linux for Fedora 36                      722  B/s | 243  B     00:00    
Errors during downloading metadata for repository 'zfs':
  - Status code: 403 for http://download.zfsonlinux.org/fedora/36/x86_64/repodata/repomd.xml (IP: 2600:1fa0:40bf:ac11:345c:d13a::)
Error: Failed to download metadata for repo 'zfs': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41, docker-ce-stable, insync, zfs
Dependencies resolved.
================================================================================
 Package       Arch    Version                           Repository        Size
================================================================================
Upgrading:
 flatpak       x86_64  1.12.6-1.fc36                     updates-testing  1.6 M
 snap-confine  x86_64  2.54.4-1.fc36                     updates-testing  2.2 M
 snapd         x86_64  2.54.4-1.fc36                     updates-testing   13 M
 swtpm         x86_64  0.7.2-1.20220307git21c90c1.fc36   updates-testing   42 k

Transaction Summary
================================================================================
Upgrade  4 Packages

Total download size: 17 M
Is this ok [y/N]: y
Downloading Packages:
(1/4): swtpm-0.7.2-1.20220307git21c90c1.fc36.x8 359 kB/s |  42 kB     00:00    
(2/4): flatpak-1.12.6-1.fc36.x86_64.rpm         2.6 MB/s | 1.6 MB     00:00    
(3/4): snap-confine-2.54.4-1.fc36.x86_64.rpm    2.5 MB/s | 2.2 MB     00:00    
(4/4): snapd-2.54.4-1.fc36.x86_64.rpm           6.5 MB/s |  13 MB     00:02    
--------------------------------------------------------------------------------
Total                                           6.9 MB/s |  17 MB     00:02     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                        1/1 
  Upgrading        : snap-confine-2.54.4-1.fc36.x86_64                      1/8 
error: lsetfilecon: (/usr/libexec/snapd/snap-confine;62335c21, system_u:object_r:snappy_confine_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed

Error unpacking rpm package snap-confine-2.54.4-1.fc36.x86_64
  Upgrading        : snapd-2.54.4-1.fc36.x86_64                             2/8 
error: unpacking of archive failed on file /usr/libexec/snapd/snap-confine;62335c21: cpio: (error 0x2)
error: snap-confine-2.54.4-1.fc36.x86_64: install failed
error: lsetfilecon: (/etc/sysconfig/snapd;62335c21, system_u:object_r:snappy_config_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed

Error unpacking rpm package snapd-2.54.4-1.fc36.x86_64
  Upgrading        : swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64           3/8 
error: unpacking of archive failed on file /etc/sysconfig/snapd;62335c21: cpio: (error 0x2)
error: snapd-2.54.4-1.fc36.x86_64: install failed
error: lsetfilecon: (/usr/bin/swtpm;62335c21, system_u:object_r:swtpm_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed

Error unpacking rpm package swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64
  Running scriptlet: flatpak-1.12.6-1.fc36.x86_64                           4/8 
error: unpacking of archive failed on file /usr/bin/swtpm;62335c21: cpio: (error 0x2)
error: swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64: install failed

  Upgrading        : flatpak-1.12.6-1.fc36.x86_64                           4/8 
error: lsetfilecon: (/usr/libexec/flatpak-system-helper;62335c21, system_u:object_r:flatpak_helper_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed

Error unpacking rpm package flatpak-1.12.6-1.fc36.x86_64
  Verifying        : flatpak-1.12.6-1.fc36.x86_64                           1/8 
  Verifying        : flatpak-1.12.6-1.fc35.x86_64                           2/8 
  Verifying        : snap-confine-2.54.4-1.fc36.x86_64                      3/8 
  Verifying        : snap-confine-2.54.3-1.fc36.x86_64                      4/8 
  Verifying        : snapd-2.54.4-1.fc36.x86_64                             5/8 
  Verifying        : snapd-2.54.3-1.fc35.x86_64                             6/8 
  Verifying        : swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64           7/8 
  Verifying        : swtpm-0.7.1-1.20220218git92a7035.fc35.x86_64           8/8 

Failed:
  flatpak-1.12.6-1.fc35.x86_64                                                  
  flatpak-1.12.6-1.fc36.x86_64                                                  
  snap-confine-2.54.3-1.fc36.x86_64                                             
  snap-confine-2.54.4-1.fc36.x86_64                                             
  snapd-2.54.3-1.fc35.x86_64                                                    
  snapd-2.54.4-1.fc36.x86_64                                                    
  swtpm-0.7.1-1.20220218git92a7035.fc35.x86_64                                  
  swtpm-0.7.2-1.20220307git21c90c1.fc36.x86_64                                  

Error: Transaction failed

You are indeed correct.
I just saw that the beta was pushed back.

I thought it was available March 16th.

But also, where should I bring up these issues if not here?

I am similarly testing F36 as well.

Output as requested:

╭─    ~ ▓▒░─────────────────────░▒▓ 1 ✘  took 20s   at 09:04:51 AM  ─╮
╰─ sudo dnf repolist                                                         ─╯
repo id                                                                      repo name
1password                                                                    1Password Beta Channel
code                                                                         Visual Studio Code
copr:copr.fedorainfracloud.org:lkiesow:g810-led                              Copr repo for g810-led owned by lkiesow
copr:copr.fedorainfracloud.org:shrisha:gnome-shell-mutter-tripplebuffered-41 Copr repo for gnome-shell-mutter-tripplebuffered-41 owned by shrisha
docker-ce-stable                                                             Docker CE Stable - x86_64
fedora                                                                       Fedora 36 - x86_64
fedora-cisco-openh264                                                        Fedora 36 openh264 (From Cisco) - x86_64
fedora-modular                                                               Fedora Modular 36 - x86_64
insync                                                                       insync repo
microsoft-edge                                                               microsoft-edge
phracek-PyCharm                                                              Copr repo for PyCharm owned by phracek
rpmfusion-free                                                               RPM Fusion for Fedora 36 - Free
rpmfusion-free-tainted                                                       RPM Fusion for Fedora 36 - Free tainted
rpmfusion-free-updates-testing                                               RPM Fusion for Fedora 36 - Free - Test Updates
rpmfusion-nonfree                                                            RPM Fusion for Fedora 36 - Nonfree
rpmfusion-nonfree-nvidia-driver                                              RPM Fusion for Fedora 36 - Nonfree - NVIDIA Driver
rpmfusion-nonfree-steam                                                      RPM Fusion for Fedora 36 - Nonfree - Steam
rpmfusion-nonfree-tainted                                                    RPM Fusion for Fedora 36 - Nonfree tainted
rpmfusion-nonfree-updates-testing                                            RPM Fusion for Fedora 36 - Nonfree - Test Updates
scootersoftware                                                              Scooter Software
slack                                                                        slack
sublime-text                                                                 Sublime Text - x86_64 - Stable
updates                                                                      Fedora 36 - x86_64 - Updates
updates-modular                                                              Fedora Modular 36 - x86_64 - Updates
updates-testing                                                              Fedora 36 - x86_64 - Test Updates
updates-testing-modular                                                      Fedora Modular 36 - x86_64 - Test Updates
vivaldi                                                                      vivaldi
zfs                                                                          ZFS on Linux for Fedora 36
2 Likes

@pizzadude
Indeed, I am seeing the same errors with SELinux:
Sample output of sudo grep "denied" /var/log/audit/audit.log

ype=AVC msg=audit(1647473664.507:5016): avc:  denied  { search } for  pid=132340 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473664.507:5017): avc:  denied  { search } for  pid=132340 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473664.507:5018): avc:  denied  { search } for  pid=132340 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473664.507:5019): avc:  denied  { search } for  pid=132340 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473664.507:5020): avc:  denied  { search } for  pid=132340 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473728.197:5031): avc:  denied  { search } for  pid=133733 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473728.197:5032): avc:  denied  { search } for  pid=133733 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473728.197:5033): avc:  denied  { search } for  pid=133733 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473728.197:5034): avc:  denied  { search } for  pid=133733 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473728.197:5035): avc:  denied  { search } for  pid=133733 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473728.197:5036): avc:  denied  { search } for  pid=133733 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473732.209:5047): avc:  denied  { search } for  pid=133904 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473732.209:5048): avc:  denied  { search } for  pid=133904 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473732.209:5049): avc:  denied  { search } for  pid=133904 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473732.209:5050): avc:  denied  { search } for  pid=133904 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473732.209:5051): avc:  denied  { search } for  pid=133904 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473732.209:5052): avc:  denied  { search } for  pid=133904 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473743.308:5072): avc:  denied  { search } for  pid=134270 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473743.308:5073): avc:  denied  { search } for  pid=134270 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473743.308:5074): avc:  denied  { search } for  pid=134270 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473743.308:5075): avc:  denied  { search } for  pid=134270 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473743.308:5076): avc:  denied  { search } for  pid=134270 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473743.308:5077): avc:  denied  { search } for  pid=134270 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647473983.297:5170): avc:  denied  { write } for  pid=140922 comm="rpmdb" name="sysimage" dev="nvme1n1p3" ino=4719 scontext=unconfined_u:unconfined_r:rpmdb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0
type=AVC msg=audit(1647473988.103:5177): avc:  denied  { write } for  pid=141027 comm="rpmdb" name="sysimage" dev="nvme1n1p3" ino=4719 scontext=unconfined_u:unconfined_r:rpmdb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0
type=AVC msg=audit(1647474111.491:5193): avc:  denied  { mac_admin } for  pid=141276 comm="dnf" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474111.666:5195): avc:  denied  { mac_admin } for  pid=141276 comm="dnf" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474111.673:5197): avc:  denied  { mac_admin } for  pid=141276 comm="dnf" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474111.723:5199): avc:  denied  { mac_admin } for  pid=141276 comm="dnf" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474510.534:5203): avc:  denied  { execute } for  pid=154327 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647474749.892:5228): avc:  denied  { mac_admin } for  pid=158515 comm="dnf" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474750.065:5230): avc:  denied  { mac_admin } for  pid=158515 comm="dnf" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474750.073:5232): avc:  denied  { mac_admin } for  pid=158515 comm="dnf" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474750.122:5234): avc:  denied  { mac_admin } for  pid=158515 comm="dnf" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647474843.705:5238): avc:  denied  { execute } for  pid=164279 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647478438.350:5287): avc:  denied  { search } for  pid=252251 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647478438.350:5288): avc:  denied  { search } for  pid=252251 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647478438.350:5289): avc:  denied  { search } for  pid=252251 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647478438.350:5290): avc:  denied  { search } for  pid=252251 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647478438.350:5291): avc:  denied  { search } for  pid=252251 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647478438.350:5292): avc:  denied  { search } for  pid=252251 comm="mandb" name="snapd" dev="nvme1n1p3" ino=552179 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 trawcon="system_u:object_r:snappy_var_lib_t:s0"
type=AVC msg=audit(1647478443.654:5300): avc:  denied  { execute } for  pid=252422 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647478478.840:5309): avc:  denied  { write } for  pid=253292 comm="rpm" name="rpmdb.sqlite-wal" dev="nvme1n1p3" ino=3510081 scontext=system_u:system_r:setroubleshoot_fixit_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0
type=AVC msg=audit(1647478478.840:5310): avc:  denied  { setattr } for  pid=253292 comm="rpm" name="rpmdb.sqlite-wal" dev="nvme1n1p3" ino=3510081 scontext=system_u:system_r:setroubleshoot_fixit_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0
type=AVC msg=audit(1647478478.840:5311): avc:  denied  { write } for  pid=253292 comm="rpm" name="rpmdb.sqlite-shm" dev="nvme1n1p3" ino=3510082 scontext=system_u:system_r:setroubleshoot_fixit_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0
type=AVC msg=audit(1647478478.840:5312): avc:  denied  { setattr } for  pid=253292 comm="rpm" name="rpmdb.sqlite-shm" dev="nvme1n1p3" ino=3510082 scontext=system_u:system_r:setroubleshoot_fixit_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0
type=AVC msg=audit(1647478479.205:5314): avc:  denied  { dac_override } for  pid=253297 comm="touch" capability=1  scontext=system_u:system_r:setroubleshoot_fixit_t:s0 tcontext=system_u:system_r:setroubleshoot_fixit_t:s0 tclass=capability permissive=0
type=AVC msg=audit(1647478479.205:5315): avc:  denied  { dac_override } for  pid=253297 comm="touch" capability=1  scontext=system_u:system_r:setroubleshoot_fixit_t:s0 tcontext=system_u:system_r:setroubleshoot_fixit_t:s0 tclass=capability permissive=0
type=AVC msg=audit(1647532761.086:191): avc:  denied  { mac_admin } for  pid=1 comm="systemd" capability=33  scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=capability2 permissive=0
type=AVC msg=audit(1647532834.056:694): avc:  denied  { execute } for  pid=6464 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647532883.633:715): avc:  denied  { execute } for  pid=7881 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647532883.648:717): avc:  denied  { execute } for  pid=7884 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647532884.710:719): avc:  denied  { execute } for  pid=7957 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647532886.634:722): avc:  denied  { execute } for  pid=8036 comm="(m-helper)" name="flatpak-system-helper" dev="nvme1n1p3" ino=1571200 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0"
type=AVC msg=audit(1647533090.601:767): avc:  denied  { mac_admin } for  pid=12244 comm="dnf" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647533090.745:769): avc:  denied  { mac_admin } for  pid=12244 comm="dnf" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647533090.752:771): avc:  denied  { mac_admin } for  pid=12244 comm="dnf" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0
type=AVC msg=audit(1647533090.807:773): avc:  denied  { mac_admin } for  pid=12244 comm="dnf" capability=33  scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0

I’ve tried relabeling my entire system, but that does not seem to fix the issue.

@ilikelinux Thanks for the suggestion.
I’ll clean up these repos and at least remove those as a possible error source.

1 Like

@sturakov Can you report the bug at bugzilla.redhat.com and link your bug report in this thread?

Thank’s for the suggestion!
I’m trying to find an existing one to attach to (such as this closed one: 1788455 – SELinux is preventing dnf from using the 'mac_admin' capabilities.).

I’ll definitely provide the link back here.

Unfortunately you are trying to use a development version of fedora (36) and using 3rd party repos that are probably not in sync with fedora 36 at present.

I am using fedora 36 but am not attempting to use any 3rd party repos as yet and have encountered no errors so far.

My recommendation to everyone is to continue using the current versions of fedora (34 & 35) as long as you are using 3rd party repos. Once F36 is near the end of the beta and ready for release then the 3rd party repos should be able to catch up and remain in sync from then on.

In the meantime, though, if at all possible, please contact the providers of these third party repos and inform them of Fedora 36’s impending release so that they can start preparing—that way they’ll hopefully be ready by release time.

Testing F36, was able to upgrade from F35 without incident.
Added the edge repository yesterday and have installed/removed software without issue.

for the rpmdb avc denials can you take a look at:
https://bugzilla.redhat.com/show_bug.cgi?id=2061141

Have you checked with SELINUX disabled?
Double check version of the installed selinux-policy (mines is at 36.3-1)
Are there any selinux policy overrides in place?

I would also recommend disabling the third party repositories while troubleshooting this, or at least at a minimum disabling the ones you can visibly see aren’t working to minimize the noise.

Thanks for testing the new release.

Happened for me and others too. And still happens after Beta was GO.
The problem is not related to third party repositories.
Bugzilla issue: 2056303 – After upgrade to 36 several packages fail to upgrade to fc36

Setting selinux to permissive allows installing the problem packages.

Attempting to recover by doing selinux relabelling may result in a system where login is not possible,
bugzilla issue: 2069102 – failed boot with selinux set to enforcing

Nvidia is not related either, I for instance do not have Nvidia on my affected system.
Somebody with enough permissions should remove that tag.

1 Like

done …