`ostree admin state-overlay` fails on bootc-managed systems

[csssuf]

I'm not sure if this is more properly an issue with bootc, so apologies if this should be opened there instead, but I believe the entire involved codepath is contained within ostree.

ostree admin state-overlay on bootc-managed systems seems to consistently fail with the following error:

bash-5.1# ostree admin state-overlay test /opt/test
error: lgetxattr(user.ostree.deploymentcsum): No data available

This is true both for existing and nonexistent directories:

bash-5.1# ls /opt/nessus_agent/
bin  com  etc  lib  sbin  var
bash-5.1# ostree admin state-overlay nessus-agent /opt/nessus_agent/
error: lgetxattr(user.ostree.deploymentcsum): No data available
bash-5.1# 

It is correct that that xattr is not present on /opt or its children:

bash-5.1# getfattr -d -m - /opt
getfattr: Removing leading '/' from absolute path names
# file: opt
security.selinux="system_u:object_r:usr_t:s0"

bash-5.1# getfattr -d -m - /opt/nessus_agent/
getfattr: Removing leading '/' from absolute path names
# file: opt/nessus_agent/
security.selinux="system_u:object_r:usr_t:s0"
bash-5.1#

Is bootc responsible for setting that xattr, or ostree?

---

Versions:

bash-5.1# bootc -V
bootc 1.8.0
bash-5.1# ostree --version
libostree:
 Version: '2025.6'
 Git: d827233eab99984a6632980615a35ad50f265f6c
 Features:
  - inode64
  - initial-var
  - libcurl
  - libsoup
  - gpgme
  - composefs
  - ex-fsverity
  - libarchive
  - selinux
  - openssl
  - sign-ed25519
  - sign-spki
  - libmount
  - systemd
  - release
  - p2p

[bachorp]

@csssuf Looks like https://issues.redhat.com/browse/RHEL-131656, #3555