Hey guys, i would like to use this opportunity to ask selinux build related question.
I too have experienced selinux package installation slowness and i see that passt is
not compressing the module. Could installation of my module be faster if I did no
compression? Is that an ok approach? Thanks for any insights you can provide.
On Fri, Jun 6, 2025 at 6:50 PM Stefano Brivio <sbrivio@xxxxxxxxxx> wrote:
[Adding Petr]
On Thu, 29 May 2025 22:05:13 +0100
"Richard W.M. Jones" <rjones@xxxxxxxxxx> wrote:
> On Thu, May 29, 2025 at 07:35:28PM +0200, Petr Lautrbach wrote:
> > Neal Gompa <ngompa13@xxxxxxxxx> writes:
> >
> > > On Thu, May 29, 2025 at 6:16 AM Richard W.M. Jones <rjones@xxxxxxxxxx> wrote:
> > >>
> > >> [This is a general moan / observation ... Sorry!]
> > >>
> > >> SELinux policy is sometimes now split so that packages can carry their
> > >> own policy subpackage. Examples include:
> > >>
> > >> https://src.fedoraproject.org/rpms/passt/blob/rawhide/f/passt.spec#_36
> > >> https://src.fedoraproject.org/rpms/nbdkit/blob/rawhide/f/nbdkit.spec#_751
> >
> > one thing it could be simply fixed:
> >
> > https://src.fedoraproject.org/rpms/passt/blob/rawhide/f/passt.spec#_91
> >
> > There's no need to run the macro 3 times - all modules can be installed
> > in one run using
> >
> > %selinux_modules_install -s %{selinuxtype} \
> > %{_datadir}/selinux/packages/%{selinuxtype}/passt.pp \
> > %{_datadir}/selinux/packages/%{selinuxtype}/pasta.pp \
> > %{_datadir}/selinux/packages/%{selinuxtype}/passt-repair.pp
>
> Thanks, this might explain why this particular package takes much
> longer than the others to install.
This is now fixed in:
passt-0^20250606.g754c6d7-1.fc41
https://bodhi.fedoraproject.org/updates/FEDORA-2025-6afa381078
passt-0^20250606.g754c6d7-1.fc42
https://bodhi.fedoraproject.org/updates/FEDORA-2025-f454466bb6
passt-0^20250606.g754c6d7-1.fc43
https://bodhi.fedoraproject.org/updates/FEDORA-2025-87a4563f00
and in the spec file template we ship upstream, thanks to Petr and Vit.
--
Stefano
--
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
-- _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
