Skip to content

No ARM64 Support for Selinuxd #2911

@KrisJohnstone

Description

@KrisJohnstone

What happened:

Enabled selinux:

kubectl -n security-profiles-operator patch spod spod --type=merge -p '{"spec":{"enableSelinux":true}}'

Upon pod restart the selinuxd container fails to start:

exec /usr/bin/bash: exec format error

If I pull the image from an ARM machine:

            "Labels": {
                "architecture": "x86_64",
                "build-date": "2023-11-01T03:17:36",
                "com.redhat.component": "ubi8-minimal-container",
                "com.redhat.license_terms": "https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI",
                "description": "selinuxd is a daemon that listens for files in /etc/selinux.d/ and installs the relevant policies.",
                "distribution-scope": "public",
                "io.buildah.version": "1.29.0",
                "io.k8s.description": "The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly.",
                "io.k8s.display-name": "Red Hat Universal Base Image 8 Minimal",
                "io.openshift.expose-services": "",
                "io.openshift.tags": "minimal rhel8",
                "maintainer": "Red Hat, Inc.",
                "name": "selinuxd",
                "release": "1029",
                "summary": "Provides the latest release of the minimal Red Hat Universal Base Image 8.",
                "url": "https://access.redhat.com/containers/#/registry.access.redhat.com/ubi8-minimal/images/8.9-1029",
                "vcs-ref": "7e7670a8c8c9a3be83beaa2787f3703b404d4a1d",
                "vcs-type": "git",
                "vendor": "Red Hat, Inc.",
                "version": "8.9"
            }
        },
        "Architecture": "amd64",
        "Os": "linux",
        "Size": 139593090,

What you expected to happen:

Container to start successfully.

How to reproduce it (as minimally and precisely as possible):

On a cluster with ARM64 Nodes, enable selinux:

kubectl -n security-profiles-operator patch spod spod --type=merge -p '{"spec":{"enableSelinux":true}}'

Environment:

  • Cloud provider or hardware configuration:
    EKS
  • OS:
    AL2023
  • Kernel (e.g. uname -a):
    6.12

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugCategorizes issue or PR as related to a bug.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions