-
Notifications
You must be signed in to change notification settings - Fork 123
Open
Labels
kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.
Description
What happened:
Enabled selinux:
kubectl -n security-profiles-operator patch spod spod --type=merge -p '{"spec":{"enableSelinux":true}}'
Upon pod restart the selinuxd container fails to start:
exec /usr/bin/bash: exec format error
If I pull the image from an ARM machine:
"Labels": {
"architecture": "x86_64",
"build-date": "2023-11-01T03:17:36",
"com.redhat.component": "ubi8-minimal-container",
"com.redhat.license_terms": "https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI",
"description": "selinuxd is a daemon that listens for files in /etc/selinux.d/ and installs the relevant policies.",
"distribution-scope": "public",
"io.buildah.version": "1.29.0",
"io.k8s.description": "The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly.",
"io.k8s.display-name": "Red Hat Universal Base Image 8 Minimal",
"io.openshift.expose-services": "",
"io.openshift.tags": "minimal rhel8",
"maintainer": "Red Hat, Inc.",
"name": "selinuxd",
"release": "1029",
"summary": "Provides the latest release of the minimal Red Hat Universal Base Image 8.",
"url": "https://access.redhat.com/containers/#/registry.access.redhat.com/ubi8-minimal/images/8.9-1029",
"vcs-ref": "7e7670a8c8c9a3be83beaa2787f3703b404d4a1d",
"vcs-type": "git",
"vendor": "Red Hat, Inc.",
"version": "8.9"
}
},
"Architecture": "amd64",
"Os": "linux",
"Size": 139593090,
What you expected to happen:
Container to start successfully.
How to reproduce it (as minimally and precisely as possible):
On a cluster with ARM64 Nodes, enable selinux:
kubectl -n security-profiles-operator patch spod spod --type=merge -p '{"spec":{"enableSelinux":true}}'
Environment:
- Cloud provider or hardware configuration:
EKS - OS:
AL2023 - Kernel (e.g.
uname -a
):
6.12
Metadata
Metadata
Assignees
Labels
kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.