Trying to get Image Builder working for RHEL8 when creating my image to OVA from onprem Image Builder on RHEL8.9 (latest patched and updated)
I keep getting the below errors when deploying the blueprint. I have followed numerous guides from RHEL Youtube: https://www.youtube.com/watch?v=Ph6k-HDlGI4 and https://www.youtube.com/watch?v=GZbboNQRC3g
as well as written RHEL guides: https://shorturl.at/9D3WU and https://shorturl.at/90pd1
I have tried RHEL8.10beta and REL8.9 Stable as well.
Output:
[/usr/lib/tmpfiles.d/fapolicyd.conf:1] Unknown group 'fapolicyd'.
[/usr/lib/tmpfiles.d/journal-nocow.conf:26] Failed to resolve specifier: uninitialized /etc detected, skipping
All rules containing unresolvable specifiers will be skipped.
[/usr/lib/tmpfiles.d/setroubleshoot.conf:1] Unknown user 'setroubleshoot'.
Failed to create file /sys/fs/selinux/checkreqprot: Read-only file system
and further down this:
Traceback (most recent call last):
File "/run/osbuild/bin/org.osbuild.rpm", line 403, in <module>
r = main(args["tree"], args["inputs"], args["options"])
File "/run/osbuild/bin/org.osbuild.rpm", line 363, in main
], cwd=pkgpath, check=True)
File "/usr/lib64/python3.6/subprocess.py", line 438, in run
output=stdout, stderr=stderr)
subprocess.CalledProcessError: Command '['rpm', '--verbose', '--root', '/run/osbuild/tree', '--nosignature', '--install', '/tmp/manifest.dzhs26x_']' returned non-zero exit status 254.
Complete log can be found here: Link to Pastecode.io for logs
My TOML blueprint config is:
name = "RHEL8-Hardened-ACSC-Protected-v2024.05.22"
description = "RHEL8-Hardened-ACSC-Protected-v2024.05.22"
version = "0.0.4"
modules = []
groups = []
distro = ""
[[packages]]
name = "aide"
[[packages]]
name = "audit"
[[packages]]
name = "cockpit"
[[packages]]
name = "cockpit-pcp"
[[packages]]
name = "cockpit-storaged"
[[packages]]
name = "cockpit-system"
[[packages]]
name = "firewalld"
[[packages]]
name = "libselinux"
[[packages]]
name = "nftables"
[[packages]]
name = "openscap-scanner"
[[packages]]
name = "openscap-utils"
[[packages]]
name = "rsyslog"
[[packages]]
name = "scap-security-guide"
[customizations]
[customizations.kernel]
append = "audit_backlog_limit=8192 audit=1"
[[customizations.user]]
name = "root"
password = "*redacted hash here*"
groups = ["wheel"]
[[customizations.user]]
name = "sysadmin"
password = password = "*redacted hash here*"
groups = ["root"]
[[customizations.group]]
name = "root"
gid = 0
[[customizations.group]]
name = "wheel"
gid = 10
[customizations.timezone]
timezone = "Australia/*location*"
ntpservers = ["*my ntp server here*"]
[customizations.locale]
keyboard = "en_US.UTF-8"
[customizations.firewall]
[customizations.firewall.services]
enabled = ["ssh", "cockpit"]
[customizations.services]
enabled = ["firewalld", "rsyslog", "auditd", "sshd", "crond"]
disabled = ["zebra", "squid", "telnet", "xinetd", "avahi-daemon", "nfs-server", "rpcbind"]
[[customizations.filesystem]]
mountpoint = "/"
size = 10737418240
[[customizations.filesystem]]
mountpoint = "/boot"
size = 1073741824
[[customizations.filesystem]]
mountpoint = "/tmp"
size = 5368709120
[[customizations.filesystem]]
mountpoint = "/home"
size = 10737418240
[[customizations.filesystem]]
mountpoint = "/var"
size = 10737418240
[[customizations.filesystem]]
mountpoint = "/var/log"
size = 5368709120
[[customizations.filesystem]]
mountpoint = "/var/log/audit"
size = 5368709120
[[customizations.filesystem]]
mountpoint = "/var/tmp"
size = 4294967296
[customizations.fdo]
[customizations.openscap]
datastream = "/usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml"
profile_id = "xccdf_org.ssgproject.content_profile_e8"
[customizations.ignition]
[customizations.ignition.firstboot]