From f7febd07a010af5ac65a142e182287ed017515d5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Luk=C3=A1=C5=A1=20Doktor?= Date: Tue, 5 Mar 2024 16:58:31 +0100 Subject: [PATCH] ci.ocp: Allow to re-apply the selinux workaround MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit in case we re-apply the selinux workaround or if user had already existing similar rule the relabel_selinux was failing. Let's allow it to modify the existing rules as well to avoid such issues. Signed-off-by: Lukáš Doktor --- ci/openshift-ci/cluster/deployments/relabel_selinux.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci/openshift-ci/cluster/deployments/relabel_selinux.yaml b/ci/openshift-ci/cluster/deployments/relabel_selinux.yaml index 854965ec51..de814c9091 100644 --- a/ci/openshift-ci/cluster/deployments/relabel_selinux.yaml +++ b/ci/openshift-ci/cluster/deployments/relabel_selinux.yaml @@ -32,7 +32,7 @@ spec: \"/(.*/)?opt/kata/share/tdvf(/.*)?\" \ \"/(.*/)?opt/kata/libexec(/.*)?\"; do - semanage fcontext -a -t qemu_exec_t \"$ENTRY\" || { echo \"Error in semanage command\"; exit 1; } + semanage fcontext -a -t qemu_exec_t \"$ENTRY\" || semanage fcontext -m -t qemu_exec_t \"$ENTRY\" || { echo \"Error in semanage command\"; exit 1; } done; restorecon -v -R /opt/kata || { echo \"Error in restorecon command\"; exit 1; } ';