Files
kata-containers/tools/osbuilder/image-builder
Manabu Sugimoto 211de08d9e osbuilder: Remove chcon operation for guest SELinux
Remove the `chcon` operation which adds `container_runtime_exec_t` label to
the `kata-agent` binary because the container-selinux package including
the 39f83cc74d
commit has been released officially.
Ref. https://centos.pkgs.org/9-stream/centos-appstream-x86_64/container-selinux-2.221.0-1.el9.noarch.rpm.html

The container-selinux package is installed in a guest rootfs when we create it with `SELinux = yes`,
and `restorecon` sets `container_runtime_exec_t` to the `kata-agent`.

Fixes: #7807

Signed-off-by: Manabu Sugimoto <Manabu.Sugimoto@sony.com>
2023-08-31 16:44:32 +09:00
..
2021-07-30 10:58:22 +01:00

Kata Containers image generation

A Kata Containers disk image is generated using the image_builder.sh script. This uses a rootfs directory created by the rootfs-builder/rootfs.sh script.

Creating a guest OS image

To create a guest OS image run:

$ sudo ./image_builder.sh path/to/rootfs

Where path/to/rootfs is the directory populated by rootfs.sh.

Note

: If you are building an image from an Alpine rootfs, see the important note here.

Further information

For more information about usage (including how to adjust the size of the image), run:

$ ./image_builder.sh -h