Restore error xattr.LRemove security.selinux permission denied

[DavidePrincipi]

Restic fails to restore a backup of OpenLDAP if the source system has SELinux=disabled and an ext4 filesystem without extended attributes (like a Contabo VPS).

Steps to reproduce

• Configure a source host, without SELinux and filesystem without xattr
• Prepare a backup of an OpenLDAP instance
• Restore the backup on a target host, with both SELinux and xattr filesystem support

Expected behavior

The backup is restored correctly

Actual behavior

A Restic restore error occurs.

Aug  5 19:06:29 ns8source agent@openldap8[2619430]: {"message_type":"error","error":{"message":"xattr.LRemove /srv/state security.selinux: permission denied"},"during":"restore","item":"/state"}

Components

• Core 3.9.2, Restic 0.17.3

See also

• Discussion https://mattermost.nethesis.it/nethesis/pl/fnnnesrtyf8e7ysqar3znzkkpw
• Discussion https://mattermost.nethesis.it/nethserver/pl/17urqmffubycucyr19uadw6pfc

---

Thanks to @nrauso

[DavidePrincipi]

In Testing, core 3.12.4-dev.1

1. Check the bug is not reproducible
2. Check the clone action works between nodes with/without xattr support