[gentoo-dev] Stage 2 LiveCDRom build always fails

[gentoo-dev] Stage 2 LiveCDRom build always fails

[Lars Kneschke]

Hello developers!

I try to build livecdrom using catalyst, to show a gentoo based system on
Linuxtag here in germany. But it always fails and time is running away.

Can some one help me? Did someone ever get it working?

* Gentoo Linux Genkernel; Version 3.0.2a
* Compiling Linux Kernel 2.6.5-gentoo-r1-livecd for x86...

mount: permission denied
* WARNING: Failed to mount /boot!

* kernel: >> Running mrproper...
* config: Using config from /var/tmp/gentoo.config
*         Previous config backed up to .config.bak
*         >> Running oldconfig...
yes: standard output: Broken pipe
yes: write error
* kernel: >> Cleaning...
*         >> Compiling 2.6.5-gentoo-r1-livecd bzImage...

.... compiling kernel and modules .....

*         :: Size is at 3348K
*         >> Creating loopback filesystem...
3348+0 records in
3348+0 records out
mount: permission denied
* ERROR: could not mount initrd filesystem

* -- End log... --

* Please consult /var/log/genkernel.log for more information and any
* errors that were reported above.

* Report any real genkernel bugs to bugs.gentoo.org and
* assign your bug to genkernel@gentoo.org. Please include
* as much information as you can in your bug report; attaching
* /var/log/genkernel.log so that your issue can be dealt with effectively.
*
* DO NOT REPORT KERNEL COMPILE FAILURES AS GENKERNEL BUGS!
*

catalyst: runscript kernel build failed

catalyst: runscript aborting due to error.

--
hosted egroupware ==> http://www.officespot.de



--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Stage 2 LiveCDRom build always fails

[Andrew Gaffney]

Lars Kneschke wrote:
> Hello developers!
> 
> I try to build livecdrom using catalyst, to show a gentoo based system on
> Linuxtag here in germany. But it always fails and time is running away.
> 
> Can some one help me? Did someone ever get it working?
> 
> * Gentoo Linux Genkernel; Version 3.0.2a
> * Compiling Linux Kernel 2.6.5-gentoo-r1-livecd for x86...
> 
> mount: permission denied
> * WARNING: Failed to mount /boot!
> 
> * kernel: >> Running mrproper...
> * config: Using config from /var/tmp/gentoo.config
> *         Previous config backed up to .config.bak
> *         >> Running oldconfig...
> yes: standard output: Broken pipe
> yes: write error
> * kernel: >> Cleaning...
> *         >> Compiling 2.6.5-gentoo-r1-livecd bzImage...
> 
> .... compiling kernel and modules .....
> 
> *         :: Size is at 3348K
> *         >> Creating loopback filesystem...
> 3348+0 records in
> 3348+0 records out
> mount: permission denied
> * ERROR: could not mount initrd filesystem
> 
> * -- End log... --
> 
> * Please consult /var/log/genkernel.log for more information and any
> * errors that were reported above.
> 
> * Report any real genkernel bugs to bugs.gentoo.org and
> * assign your bug to genkernel@gentoo.org. Please include
> * as much information as you can in your bug report; attaching
> * /var/log/genkernel.log so that your issue can be dealt with effectively.
> *
> * DO NOT REPORT KERNEL COMPILE FAILURES AS GENKERNEL BUGS!
> *
> 
> catalyst: runscript kernel build failed
> 
> catalyst: runscript aborting due to error.

Are you running this as root or a normal user?

-- 
Andrew Gaffney
Network Administrator
Skyline Aeronautics, LLC.
636-357-1548


--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Stage 2 LiveCDRom build always fails

[Lars Kneschke]

Andrew Gaffney <agaffney@skylineaero.com> schrieb: 
>
>Are you running this as root or a normal user?

I try to build anything as root.

Cu
--
hosted egroupware ==> http://www.officespot.de



--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Stage 2 LiveCDRom build always fails

[Lars Kneschke]

Lars Kneschke <lars@kneschke.de> schrieb: 
>Andrew Gaffney <agaffney@skylineaero.com> schrieb: 
>>
>>Are you running this as root or a normal user?
>

Just discovered that grsecurity is denied it.

Jun  7 04:57:39 ProxyLK grsec: From 192.168.4.229: denied attempt to mount
/dev/loop0 as
/storage/catalyst/tmp/default/livecd-stage2-x86-20040604/var/tmp/genkernel/initrd-mount
from chroot by (mount:14881) UID(0) EUID(0), parent (genkernel:4372) UID(0)
EUID(0)

Hm, now i just need to find out, how i can disable this feature.

Cu 
--
hosted egroupware ==> http://www.officespot.de



--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Stage 2 LiveCDRom build always fails

[Lance Albertson]

[-- Attachment #1: Type: text/plain, Size: 1629 bytes --]

On Mon, 2004-06-07 at 00:07, Lars Kneschke wrote:

> Jun  7 04:57:39 ProxyLK grsec: From 192.168.4.229: denied attempt to mount
> /dev/loop0 as
> /storage/catalyst/tmp/default/livecd-stage2-x86-20040604/var/tmp/genkernel/initrd-mount
> from chroot by (mount:14881) UID(0) EUID(0), parent (genkernel:4372) UID(0)
> EUID(0)
> 
> Hm, now i just need to find out, how i can disable this feature.

That should be a sysctl setting you can change (if you have sysctl
features enabled). If you want to open up all the chroot settings, you
could have it set with these options:

kernel.grsecurity.chroot_findtask = 0
kernel.grsecurity.chroot_deny_sysctl = 0
kernel.grsecurity.chroot_caps = 0
kernel.grsecurity.chroot_execlog = 0
kernel.grsecurity.chroot_restrict_nice = 0
kernel.grsecurity.chroot_deny_mknod = 0
kernel.grsecurity.chroot_deny_chmod = 0
kernel.grsecurity.chroot_enforce_chdir = 0
kernel.grsecurity.chroot_deny_pivot = 0
kernel.grsecurity.chroot_deny_chroot = 0
kernel.grsecurity.chroot_deny_fchdir = 0
kernel.grsecurity.chroot_deny_mount = 0
kernel.grsecurity.chroot_deny_unix = 0
kernel.grsecurity.chroot_deny_shmat = 0

Those should all disable any grsec related chroot restrictions for you.
Although, I'd recommend you change those settings back after you're done
building. Perhaps some of the hardened folks might know of a better
method than this?

Cheers,
-- 
Lance Albertson <ramereth@gentoo.org>
Gentoo Infrastructure

---
GPG Public Key:  <http://www.ramereth.net/lance.asc>
Key fingerprint: 0423 92F3 544A 1282 5AB1  4D07 416F A15D 27F4 B742

ramereth/irc.freenode.net

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]