mirror of
https://github.com/containers/skopeo.git
synced 2026-07-14 22:28:37 +00:00
5ca91c0eb7
This fixes a large SELinux bug. Currently if you do the following commands ctr=$(buildah from scratch) mnt=$(buildah mount $ctr) dnf install --installroot=$mnt httpd buildah run $ctr touch /test The last command fails. The reason for this is the SELinux labels are getting applied to the mount point, since it was not being mounted as an overlay file system. Containers/storage was updated to always mount an overlay even if the lower layer is empty This then causes the mount point to use a context mount, and changes dnf to not apply labels. This change then allows buildah run to create confined containers to run code. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com> Closes: #486 Approved by: TomSweeneyRedHat