Building from rockylinux/rockylinux

[SanekP]

I'm trying to build own Kairos based on rockylinux. Here's my simple Dockerfile:

FROM quay.io/kairos/kairos-init AS kairos-init

FROM rockylinux/rockylinux:9
RUN dnf -y install iscsi-initiator-utils

ARG VERSION=1.0.0
RUN --mount=type=bind,from=kairos-init,src=/kairos-init,dst=/kairos-init /kairos-init --version "${VERSION}" -k k0s

Building it with next commands:

docker pull quay.io/kairos/kairos-init
docker pull rockylinux/rockylinux:9
VERSION=0.0.4
docker build -t d.l:5000/rocky:${VERSION} --build-arg VERSION=${VERSION} .
docker pull quay.io/kairos/auroraboot
docker run --name=aurora --rm --net host -v /var/run/docker.sock:/var/run/docker.sock quay.io/kairos/auroraboot --set "state_dir=/tmp/auroraboot" --set container_image=docker://d.l:5000/rocky:${VERSION}

Then I download http://localhost:8080/kairos-rocky-9.6-standard-amd64-generic-v0.0.4-k0sv1.33.2+k0s.0.iso and boot target node from it. It loads fine, shows Kairos logo and address for the WebUI Installer.
I can ping this IP address but the opening of 8080 port gives me timeout!
Looks like firewalld blocks incoming connections.
However if I boot from https://github.com/kairos-io/kairos/releases/download/v3.4.2/kairos-rockylinux-9-standard-amd64-generic-v3.4.2-k0sv1.32.4+k0s.0.iso I can reach WebUI Installer.

Then I tried to build same Dockerfile but from rockylinux/rockylinux:10 and it failed:

7.250 on stage Install base packages: failed to run dnf install -y --setopt=install_weak_deps=False file gawk iptables less nano sudo tar zstd rsync lvm2 jq dosfstools e2fsprogs parted logrotate fail2ban systemd-networkd gdisk audit cracklib-dicts cloud-utils-growpart device-mapper iproute nfs-utils openssh-server openssh-clients polkit qemu-guest-agent systemd which cryptsetup tpm2-tss xz systemd-resolved kernel kernel-modules kernel-modules-extra grub2 grub2-efi-x64 grub2-efi-x64-modules grub2-pc shim-x64 dracut dracut-live dracut-network dracut-squash squashfs-tools dhcp-client: exit status 1
7.250 2025-07-12T22:14:51Z INF [1] Processing stage step '.Create branding files'. ( commands: 0, files: 5, ... )
7.253 2025-07-12T22:14:51Z INF [1] Processing stage step '.Install grub configs'. ( commands: 0, files: 2, ... )
7.254 2025-07-12T22:14:51Z INF [1] Processing stage step '.Install Kubernetes packages'. ( commands: 5, files: 0, ... )
13.89 2025-07-12T22:14:58Z INF [1] Processing stage step '.Create k0s services for systemd'. ( commands: 0, files: 2, ... )
13.89 2025-07-12T22:14:58Z INF [1] Processing stage step '.Add pmem modules to initramfs'. ( commands: 0, files: 1, ... )
13.90 2025-07-12T22:14:58Z INF [1] Processing stage step '.Add sysext module to initramfs'. ( commands: 0, files: 1, ... )
13.90 2025-07-12T22:14:58Z INF [1] Processing stage step '.Add network module to initramfs'. ( commands: 0, files: 1, ... )
13.90 2025-07-12T22:14:58Z INF [1] Processing stage step '.Add immucore module to initramfs'. ( commands: 0, files: 4, ... )
13.90 2025-07-12T22:14:58Z INF [1] Processing stage step '.Create kairos welcome message'. ( commands: 0, files: 2, ... )
13.90 2025-07-12T22:14:58Z INF [1] Processing stage step '.Install suc-upgrade script'. ( commands: 0, files: 1, ... )
13.90 2025-07-12T22:14:58Z INF [1] Processing stage step '.Install logrotate config'. ( commands: 0, files: 1, ... )
13.90 2025-07-12T22:14:58Z INF [1] Done executing stage 'install'
13.90
13.90 2025-07-12T22:14:58Z ERR Failed to run the install stage: 1 error occurred:
13.90 * failed to run dnf install -y --setopt=install_weak_deps=False file gawk iptables less nano sudo tar zstd rsync lvm2 jq dosfstools e2fsprogs parted logrotate fail2ban systemd-networkd gdisk audit cracklib-dicts cloud-utils-growpart device-mapper iproute nfs-utils openssh-server openssh-clients polkit qemu-guest-agent systemd which cryptsetup tpm2-tss xz systemd-resolved kernel kernel-modules kernel-modules-extra grub2 grub2-efi-x64 grub2-efi-x64-modules grub2-pc shim-x64 dracut dracut-live dracut-network dracut-squash squashfs-tools dhcp-client: exit status 1
13.90
13.90
13.90 2025-07-12T22:14:58Z ERR Failed to run the install stage: 1 error occurred:
13.90 * failed to run dnf install -y --setopt=install_weak_deps=False file gawk iptables less nano sudo tar zstd rsync lvm2 jq dosfstools e2fsprogs parted logrotate fail2ban systemd-networkd gdisk audit cracklib-dicts cloud-utils-growpart device-mapper iproute nfs-utils openssh-server openssh-clients polkit qemu-guest-agent systemd which cryptsetup tpm2-tss xz systemd-resolved kernel kernel-modules kernel-modules-extra grub2 grub2-efi-x64 grub2-efi-x64-modules grub2-pc shim-x64 dracut dracut-live dracut-network dracut-squash squashfs-tools dhcp-client: exit status 1
13.90
13.90
13.90 2025-07-12T22:14:58Z ERR [1] 1 error occurred:
13.90 * failed to run dnf install -y --setopt=install_weak_deps=False file gawk iptables less nano sudo tar zstd rsync lvm2 jq dosfstools e2fsprogs parted logrotate fail2ban systemd-networkd gdisk audit cracklib-dicts cloud-utils-growpart device-mapper iproute nfs-utils openssh-server openssh-clients polkit qemu-guest-agent systemd which cryptsetup tpm2-tss xz systemd-resolved kernel kernel-modules kernel-modules-extra grub2 grub2-efi-x64 grub2-efi-x64-modules grub2-pc shim-x64 dracut dracut-live dracut-network dracut-squash squashfs-tools dhcp-client: exit status 1

I also tried to install same set of deps and it looks like dhcp-client is not available.

$ docker run --rm -it rockylinux/rockylinux:10
bash-5.2# dnf install -y --setopt=install_weak_deps=False file gawk iptables less nano sudo tar zstd rsync lvm2 jq dosfstools e2fsprogs parted logrotate fail2ban systemd-networkd gdisk audit cracklib-dicts cloud-utils-growpart device-mapper iproute nfs-utils openssh-server openssh-clients polkit qemu-guest-agent systemd which cryptsetup tpm2-tss xz systemd-resolved kernel kernel-modules kernel-modules-extra grub2 grub2-efi-x64 grub2-efi-x64-modules grub2-pc shim-x64 dracut dracut-live dracut-network dracut-squash squashfs-tools dhcp-client
Rocky Linux 10 - BaseOS                                                                                                                                                                                                                                  17 MB/s | 8.5 MB     00:00
Rocky Linux 10 - AppStream                                                                                                                                                                                                                              5.2 MB/s | 2.0 MB     00:00
Rocky Linux 10 - Extras                                                                                                                                                                                                                                  14 kB/s | 4.1 kB     00:00
Package gawk-5.3.0-6.el10.x86_64 is already installed.
Package less-661-3.el10.x86_64 is already installed.
Package tar-2:1.35-7.el10.x86_64 is already installed.
No match for argument: fail2ban
No match for argument: systemd-networkd
No match for argument: gdisk
Package cracklib-dicts-2.9.11-8.el10.x86_64 is already installed.
Package tpm2-tss-4.1.3-5.el10.x86_64 is already installed.
No match for argument: dhcp-client
Error: Unable to find a match: fail2ban systemd-networkd gdisk dhcp-client

[jimmykarily]

Is it possible that firewalld ships with different defaults in newer versions of the package? The v3.4.2 image that worked for you would have the package version that was in the repositories at the time of building, with whatever rules it was shipped with.
Can you SSH to the machine to inspect firewalld configuration?

[Itxaka]

You should try the newer init v0.5.5 version as a few things changed for RHEL variants.

We moved to use the default NetworkManager that ships with vanilla. If we find systemd-networkd in the system, we enable that instead. We set several switches to set the proper initramfs modules. And we tested rocky/alma 10 to make it work as expected with the dropped packages.