I spoke to the great @MFasulo who advised that he can help you directly.
Have got this installed on Centos 8.4 as well after a strange problem with Commvault not being able to run any services. /var/log/message showed permission errors and mentioned “re-labelling” so I ran “touch /.autorelabel” and rebooted and CV services came online after the boot.
When you did the install did you leave the default permission set?
@Mike London UK, could you try one more thing?
Revert to snapshot again and then run restorecon on the directories:
restorecon -Rv /opt/commvault /cvlt
Now retry install and see if it behaves correctly.
Thanks @Mike London UK. I’ll be putting together a KB article for this.
I believe the cause here is the creation of the filesystems for Commvault. By default they have the unlabeled_t type which prevented systemd from interacting with their contents, among other problems most likely.
New directories automatically inherit the SELinux context of their parent, but that doesn’t apply to mount points. We saw in /etc/selinux/targeted/contexts/files/file_contexts that everything under /opt would get context system_u:object_r:usr_t:s0, but that needs to be applied with restorecon.
Hi,
It probably won’t help much, but I works in my lab
I’m running on CentOS
CentOS Linux release 7.7.1908 (Core)
my unpacked install package is 7G in size
7.0G /opt/media/Unix/
Hi @Robert Horowski ,
Did you install any additional package on CentOS?
Also how did you create your Commvault package? I selected only linux_x8664 and full media kit.
Thank you.
Have got this installed on Centos 8.4 as well after a strange problem with Commvault not being able to run any services. /var/log/message showed permission errors and mentioned “re-labelling” so I ran “touch /.autorelabel” and rebooted and CV services came online after the boot.
Hi @MFasulo,
I sent email to you. Thank you.
I don’t recall seeing that screen but I would have just taken the defaults if it was displayed. I’ll re-run the installer and let you know.
Hi @ibrahimemrekaya
From what I can see in history I’ve only installed lvm packages
I’ve also downloaded only linux_x8664 and full media kit.
My media was created 19-OCT so I tried to create fresh media today and run the installer on the same system as before and Commserve is gone.
Although please note that this time it is 11.25.6 as 11.25.2 was not available for download anymore.
So maybe there is something wrong with media creator.
@MFasulo I’ve just re-run the install with the same result, “re-label” the system and then Commvault starts. There was no prompt for permissions, maybe not displayed with my install options. I chose
Create new CommCell
All in one
/opt for install directory
/cvlt/ic for index cache
/cvlt for web cache, database installation path (/cvlt/commvaultDB is a mounted file system) and disaster recovery path
Happy to share doc with screenshots and other info you’re interested. Is here the best place for that or somewhere separate.?
Thanks, my installer just reports 11.25.0 (from Store) but I get exactly the same as you are now. @Mike Struening is the any chance of getting someone to validate the install image?
@MFasulo I’ve just re-run the install with the same result, “re-label” the system and then Commvault starts. There was no prompt for permissions, maybe not displayed with my install options. I chose
Create new CommCell
All in one
/opt for install directory
/cvlt/ic for index cache
/cvlt for web cache, database installation path (/cvlt/commvaultDB is a mounted file system) and disaster recovery path
Happy to share doc with screenshots and other info you’re interested. Is here the best place for that or somewhere separate.?
Email me your document, I will take a peek. You said this didnt happen on 7.x correct, only 8.4?
Hi @Mike London UK ,
Could you run sestatus and share the output?
I’m sure we can do that.
@MFasulo , I’ll reach out to our cloud team, though knowing you, you’ll likely have some advice/insight.
8.4 is unsupported. If anyone is looking to test this beyond basic lab tests, please reach out to me mfasulo@commvault.com
I’ll rebuild at 8.3 whilst we get that image checked out, thanks.
@Carl Manzi here’s the output:
SELinux status: enabled SELinuxfs mount: /sys/fs/selinux SELinux root directory: /etc/selinux Loaded policy name: targeted Current mode: enforcing Mode from config file: enforcing Policy MLS status: enabled Policy deny_unknown status: allowed Memory protection checking: actual (secure) Max kernel policy version: 33 (root@lnxcs02 Desktop]# Hope that helps.
I’ll rebuild at 8.3 whilst we get that image checked out, thanks.
Ok keep me posted, I’m not sure 8.3 was tested.
Thanks @Mike London UK. These look like RHEL defaults so no concerns there.
After install but before you relabel, can you run the following command to see what sort of denials are occurring?
Let’s see if we can get more detail. Try running the following to see SELinux denial entries in the system journal:
journalctl -g 'SELinux is preventing'
There will probably be a number of entries but look for those that appear toward the bottom, around 16:28 server time. Part of those messages should include something like this which we can run to get a detailed report of the issue:
For complete SELinux messages run: sealert -l 97a1c0df-81ed-4c08-ba27-41c5067b713b
Run those sealert commands as shown on your system -- they will have a different GUID than shown above -- and let’s see what they tell us.