CentOS Stream Getamp.sh error

OS Name/Version: CentOS Stream 9

Product Name/Version: bash <(wget -qO- getamp.sh)

Problem Description: Error loading shared library: /tmp/mono-bundle-vdequK/libsqlite3 /tmp/mono-bundle-vdequK/libsqlite3: cannot open shared object file: Operation not permitted

Steps to reproduce:

Sudo su -l
bash <(wget -qO- getamp.sh)
N
Y
N
Y
default user
password
password confirmation
enter domain
default email

Continue with Install


AMP System user:		Already exists
Instance Manager:		Already installed
HTTPS setup:			Yes, via nginx with domain *******.****.***
Install Docker:			No
Install 32-bit libraries:	No
Install Java:			Yes

Ready to install AMP. Press ENTER to continue or CTRL+C to cancel.


Installing AMP...
amp already exists. Skipping...
Error loading shared library: /tmp/mono-bundle-vdequK/libsqlite3 /tmp/mono-bundle-vdequK/libsqlite3: cannot open shared object file: Operation not permitted
Updating System...
Installing prerequisites...
Adding Adoptium RPM repository...
Java could not be installed automatically for your distribution. Please install it manually after setup completes.
Updating System...
Installing prerequisites...
Adding Adoptium RPM repository...
Java could not be installed automatically for your distribution. Please install it manually after setup completes.

Press any key to continue.Installing Java for Minecraft...
Installing nginx and certbot...
Updating SELinux rules (httpd relay)...
AMP instance manager already installed. Skipping...
Adding firewall rules...
Adding firewall rule for port 443 (AMP Reverse Proxy) via firewalld...
Warning: ALREADY_ENABLED: 443:tcp
success
success
Adding firewall rule for port 80 (AMP Reverse Proxy) via firewalld...
Warning: ALREADY_ENABLED: 80:tcp
success
success
[Info/1] AMP Instance Manager v2.5.1.4 built 01/08/2024 21:38
[Info/1] Stream: Mainline / Release - built by CUBECODERS/buildbot on CCL-DEV
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Certificate not yet due for renewal
Deploying certificate
Successfully deployed certificate for ********.****.***to /etc/nginx/conf.d/********.****.***.conf
Congratulations! You have successfully enabled HTTPS on https://********.****.***

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
If you like Certbot, please consider supporting our work by:
 * Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
 * Donating to EFF:                    https://eff.org/donate-le
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
[Info/1] Done!
Creating default instance...
Error loading shared library: /tmp/mono-bundle-3hRF9N/libsqlite3 /tmp/mono-bundle-3hRF9N/libsqlite3: cannot open shared object file: Operation not permitted
Failed to create default instance.
Removing generated nginx config...
Aborting...

Something went wrong during the installation. Would you like to upload your setup log for easy sharing?
This will upload /root/getamp-20240809-212836.log to the hastebin service and give you a URL you can share.

The log file may contain sensitive information such as username, any supplied domain names or your systems hostname so if in doubt - check 
the file manually and upload it yourself.
[y/N] ```

Make sure that /tmp/ isn’t mounted with the noexec flag.

It doesn’t seem to be.
root is mounted, /dev/mapper/cs-root on / type xfs (rw,relatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota)

/tmp/ looks like an ordinary folder

it downloads a new copy of the file libsqlite3 each time, owner is amp, permissions on the file is 644, is this correct?

It’s unpacking libraries and dependencies there, can you post the output of mount | grep tmp ?

mount | grep tmp

findmnt -l | grep noexec

Well, that was a pain.

found the culprit, fapolicyd.

I temporarily stopped the service sudo systemctl stop fapolicyd

Thanks for your help.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.