Skip to content

A selinux labels on host are borked when installing udica inside toolbox container #1737

@LogExE

Description

@LogExE

Describe the bug
Running toolbx as root and installing some packages ("udica" in my experience) does bad things to a system. I think udica had some sort of dependency that run postinstall hook to relabel files. After installing this package systems daemons could not be restarted anymore and after rebooting the system it could not boot anymore. The fix was to force shutdown and run Linux with "autorelabel" argument

Steps how to reproduce the behaviour

  1. Run fedora-43 toolbx as root
  2. Inside run "dnf in udica"
  3. See errors in random places (e.g. when restarting systemd units)

Expected behaviour
Packages installs correctly

Actual behaviour
Packages are installed, but system is broken

Output of toolbox --version (v0.0.90+)
toolbox version 0.3

Toolbx package info (rpm -q toolbox)
toolbox-0.3-1.fc43.x86_64

Output of podman version
e.g.,

Client:        Podman Engine
Version:       5.7.1
API Version:   5.7.1
Go Version:    go1.25.4 X:nodwarf5
Git Commit:    f845d14e941889ba4c071f35233d09b29d363c75
Built:         Wed Dec 10 00:00:00 2025
Build Origin:  Fedora Project
OS/Arch:       linux/amd64

Podman package info (rpm -q podman)
podman-5.7.1-1.fc43.x86_64

Info about your OS
Fedora CoreOS 43

Metadata

Metadata

Assignees

No one assigned

    Labels

    1. BugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions