github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-07-17 08:53:26 +00:00
Code Issues Projects Releases Wiki Activity

ci.ocp: Allow to re-apply the selinux workaround

Browse Source 
in case we re-apply the selinux workaround or if user had already
existing similar rule the relabel_selinux was failing. Let's allow it to
modify the existing rules as well to avoid such issues.

Signed-off-by: Lukáš Doktor <ldoktor@redhat.com>
This commit is contained in:
Lukáš Doktor 2024-03-05 16:58:31 +01:00
parent fbbea68f1f
commit f7febd07a0
No known key found for this signature in database
GPG Key ID: 26B362E47FCF22C1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ci/openshift-ci/cluster/deployments/relabel_selinux.yaml
View File

@ -32,7 +32,7 @@ spec:
\"/(.*/)?opt/kata/share/tdvf(/.*)?\" \ \"/(.*/)?opt/kata/share/tdvf(/.*)?\" \
\"/(.*/)?opt/kata/libexec(/.*)?\"; \"/(.*/)?opt/kata/libexec(/.*)?\";
do do
semanage fcontext -a -t qemu_exec_t \"$ENTRY\" || { echo \"Error in semanage command\"; exit 1; } semanage fcontext -a -t qemu_exec_t \"$ENTRY\" || semanage fcontext -m -t qemu_exec_t \"$ENTRY\" || { echo \"Error in semanage command\"; exit 1; }
done; done;
restorecon -v -R /opt/kata || { echo \"Error in restorecon command\"; exit 1; } restorecon -v -R /opt/kata || { echo \"Error in restorecon command\"; exit 1; }
'; ';