containers / containers/toolbox
A selinux labels on host are borked when installing udica inside toolbox container
- Dominant language
- Go
- Stars
- 3.5k
- Forks
- 262
- Avg merge
- 3d 1h
- Merged PRs (30d)
- 1
Description
**Describe the bug**
Running toolbx as root and installing some packages ("udica" in my experience) does bad things to a system. I think udica had some sort of dependency that run postinstall hook to relabel files. After installing this package systems daemons could not be restarted anymore and after rebooting the system it could not boot anymore. The fix was to force shutdown and run Linux with "autorelabel" argument
**Steps how to reproduce the behaviour**
1. Run fedora-43 toolbx as root
2. Inside run "dnf in udica"
3. See errors in random places (e.g. when restarting systemd units)
**Expected behaviour**
Packages installs correctly
**Actual behaviour**
Packages are installed, but system is broken
**Output of `toolbox --version` (v0.0.90+)**
toolbox version 0.3
**Toolbx package info (`rpm -q toolbox`)**
toolbox-0.3-1.fc43.x86_64
**Output of `podman version`**
e.g.,
```
Client: Podman Engine
Version: 5.7.1
API Version: 5.7.1
Go Version: go1.25.4 X:nodwarf5
Git Commit: f845d14e941889ba4c071f35233d09b29d363c75
Built: Wed Dec 10 00:00:00 2025
Build Origin: Fedora Project
OS/Arch: linux/amd64
```
**Podman package info (`rpm -q podman`)**
podman-5.7.1-1.fc43.x86_64
**Info about your OS**
Fedora CoreOS 43
Contributor guide
Research direction
Start by reproducing the issue with a root Fedora 43 toolbx and `dnf in udica`, then inspect the SELinux labels before and after installation. Confirm that package installation causes host files to be relabeled and that systemd restart or reboot failures result; done means the package installs without damaging host labeling.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux
- Domain
- cli, operating-systems, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100