Re: Slowness of installing *-selinux subpackages

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Stefano Brivio <sbrivio@xxxxxxxxxx> writes:

> [Adding Petr]
>
> On Thu, 29 May 2025 22:05:13 +0100
> "Richard W.M. Jones" <rjones@xxxxxxxxxx> wrote:
>
>> On Thu, May 29, 2025 at 07:35:28PM +0200, Petr Lautrbach wrote:
>> > Neal Gompa <ngompa13@xxxxxxxxx> writes:
>> >   
>> > > On Thu, May 29, 2025 at 6:16 AM Richard W.M. Jones <rjones@xxxxxxxxxx> wrote:  
>> > >>
>> > >> [This is a general moan / observation ... Sorry!]
>> > >>
>> > >> SELinux policy is sometimes now split so that packages can carry their
>> > >> own policy subpackage.  Examples include:
>> > >>
>> > >> https://src.fedoraproject.org/rpms/passt/blob/rawhide/f/passt.spec#_36
>> > >> https://src.fedoraproject.org/rpms/nbdkit/blob/rawhide/f/nbdkit.spec#_751  
>> > 
>> > one thing it could be simply fixed:
>> > 
>> > https://src.fedoraproject.org/rpms/passt/blob/rawhide/f/passt.spec#_91
>> > 
>> > There's no need to run the macro 3 times - all modules can be installed
>> > in one run using
>> > 
>> > %selinux_modules_install -s %{selinuxtype} \
>> >     %{_datadir}/selinux/packages/%{selinuxtype}/passt.pp \
>> >     %{_datadir}/selinux/packages/%{selinuxtype}/pasta.pp \
>> >     %{_datadir}/selinux/packages/%{selinuxtype}/passt-repair.pp  
>> 
>> Thanks, this might explain why this particular package takes much
>> longer than the others to install.
>
> This is now fixed in:
>
>   passt-0^20250606.g754c6d7-1.fc41
>   https://bodhi.fedoraproject.org/updates/FEDORA-2025-6afa381078
>
>   passt-0^20250606.g754c6d7-1.fc42
>   https://bodhi.fedoraproject.org/updates/FEDORA-2025-f454466bb6
>
>   passt-0^20250606.g754c6d7-1.fc43
>   https://bodhi.fedoraproject.org/updates/FEDORA-2025-87a4563f00
>
> and in the spec file template we ship upstream, thanks to Petr and Vit.
>

Also libsemanage was updated to improve the policy rebuild performance
on F42 and later - https://bodhi.fedoraproject.org/updates/FEDORA-2025-e7e3a673a7

This has been fixed in upstream for some time already but I forgot to
update Fedora 42. Thanks to  Viktor Ashirov  who noticed it.

Petr

-- 
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux