#992351 molly-guard dracut issue

Package:
molly-guard
Source:
molly-guard
Submitter:
Anton Lundin
Date:
2025-02-21 22:09:01 UTC
Severity:
normal
#992351#5
Date:
2021-08-17 16:08:49 UTC
From:
To:
Hi.

When using molly-guard together with dracut machine fails to
poweroff/halt/reboot with a issue like:


[   67.897697] dracut Warning: Killing all remaining processes
dracut Warning: Killing all remaining processes
[   67.975525] dracut Warning: Unmounted /oldroot.
[   68.002391] dracut: Disassembling device-mapper devices
E: not a regular file: /lib/molly-guard/poweroff[   68.036575] dracut Warning: poweroff failed!

dracut Warning: poweroff failed!


[   68.039669] dracut Warning:
dracut Warning:


Generating "/run/initramfs/rdsosreport.txt"
You might want to save "/run/initramfs/rdsosreport.txt" to a USB stick or /boot
after mounting them and attach it to a bug report.

To get more debug information in the report,
reboot with "rd.debug" added to the kernel command line.

Dropping to debug shell.

shutdown:/#


This is because the /lib/molly-guard/poweroff symlink isn't available in
the dracut initramfs.


This can be worked around by adding this:
install_items+=" /lib/molly-guard/poweroff /lib/molly-guard/reboot /lib/molly-guard/halt /lib/molly-guard/shutdown "

to

/etc/dracut.conf.d/20-molly-guard.conf


And rebuilding the initramfs.


//Anton
#992351#10
Date:
2025-02-05 18:30:35 UTC
From:
To:
So you would suggest adding a /etc/dracut.conf.d/20-molly-guard.conf to
the molly-guard package to solve this?

Greetings
Marc
#992351#13
Date:
2025-02-05 18:30:35 UTC
From:
To:
So you would suggest adding a /etc/dracut.conf.d/20-molly-guard.conf to
the molly-guard package to solve this?

Greetings
Marc
#992351#18
Date:
2025-02-21 21:55:16 UTC
From:
To:
I've implemented a workaround for this in our configuration management
and forgot all about it, until now when I started playing with trixie
and it all came crashing down again.

This bug persists, and the old workaround doesn't apply in trixie, due
to things being symlinked in other ways.

The new variant of this woraround looks like:

install_items+=" /usr/lib/molly-guard/molly-guard "



It would be great if we figured out how these diverts causes dracut to
fail to reboot machines. Probably because it's missing a reboot binary
in the initramfs, because it just got a mollyguard symlink instead.
Either ensure molly-guard doesn't end up in the dracut initramfs, or
include all of molly-guard so dracut can reboot properly.


///Anton