Add coreos and sle micro to selinux support

[galal-hussein]

Signed-off-by: galal-hussein [email protected]

Proposed Changes

• Modify install.sh script to add coreos and sle micro rpms

Types of Changes

new feature

Verification

Testing

• Fresh installation method

1- install k3s with selinux enabled on EL7
2- install k3s with selinux enabled on EL8
3- install k3s with selinux enabled on coreos fedora (experimental)
4- install k3s with selinux enabled on microos and SLE
5- install k3s with selinux enabled on SLE micro

• Upgrade

We need to make sure that k3s-selinux is updated correctly on all systems with existing installations

Linked Issues

• k3s-selinux incompatible with container-selinux > 2.188 #6814

User-Facing Change

Further Comments

[brandond]

LGTM syntactically!

[brandond]

nit: do we need to check for suse again when we're already in a suse-specific block?

[VestigeJ]

Posting here just for tracking until other issues get created.

Single node install is good - SLES 15SP4
Single node upgrade on existing install is good - SLES 15SP4

[rancher-max]

Current issues noticed in testing:

Fedora:

1. Not registering channel properly in that it is also trying to pull from stable. I believe this is due to line 489 in the currently live install script that has not been changed in this PR:

...
Added:
  k3s-selinux-1.3-4.coreos.noarch
Changes queued for next boot. Run "systemctl reboot" to start a reboot
[WARN]  Failed to find the k3s-selinux policy, please install:
    rpm-ostree install -y container-selinux
    rpm-ostree install -y https://rpm-testing.rancher.io/k3s/testing/common/coreos/noarch/k3s-selinux-1.2-2.coreos.noarch.rpm
...

2. Shouldn't start k3s automatically. This should be more like the transactional-update
3. Uninstall needs to take rpm-ostree into account as well

---

SLE Micro:

1. Failed to install k3s-selinux:

...
(1/1) Installing: k3s-selinux-1.3-4.slemicro.noarch [......
libsemanage.semanage_pipe_data: Child process /usr/lib/selinux/hll/pp failed with code: 255. (No such file or directory).
k3s: libsepol.policydb_read: policydb module version 21 does not match my version range 4-20
k3s: libsepol.sepol_module_package_read: invalid module in module package (at section 0)
k3s: Failed to read policy package
libsemanage.semanage_direct_commit: Failed to compile hll files into cil files.
 (No such file or directory).
/usr/sbin/semodule:  Failed!
done]
Executing %posttrans script 'k3s-selinux-1.3-4.slemicro.noarch.rpm' [....done]
2023-02-23 05:44:16 Application returned with exit status 0.
2023-02-23 05:44:19 Transaction completed.
...

[est-suse]

Validated On:

rhel8 *
rhel9 (v1.26) *
ubuntu *
sles15 RPM install (instead of default tar) *
centos7 *
Fedora coreos
sle micro

Scenarios:

Single installation

Upgrade from previous version to current commit - Deploying Workloads

Cluster config:

1 server - 1 agent

Commits:

1.26 4182dcaac8da225dd004737db2aae1393308c79d

1.25 c25f611eed749c15a51c6858480b84047974ab63

1.24 53e5d566b5a415544e8c501d34588bdb0a815f40

[akshaychopra5207]

This change is not working for flatcar container linux

[xsen84]

On flatcar the k3s.service is not created anymore.