]> git.apps.os.sepia.ceph.com Git - ceph-ansible.git/commit
Fix selinux label issues
authorTeoman ONAY <tonay@ibm.com>
Tue, 14 Mar 2023 11:26:56 +0000 (12:26 +0100)
committerGuillaume Abrioux <gabrioux@ibm.com>
Wed, 15 Mar 2023 14:51:00 +0000 (15:51 +0100)
commitd25fa6757c93af556c71c3e148835f591bf5b7be
tree48d661b13720c401bc3e70bf00e655344a362d98
parentc1b541f69e02f0d6d5cedfc706d332bf017f16eb
Fix selinux label issues

Add --security-opt label=disable to all containers
accessing /var/lib/ceph. podman selinux relabeling behavious changed
since version podman-3:4.2.0-1 which prevent some containers to access
files in these subdirectories.

Signed-off-by: Teoman ONAY <tonay@ibm.com>
roles/ceph-crash/templates/ceph-crash.service.j2
roles/ceph-mds/templates/ceph-mds.service.j2
roles/ceph-mgr/templates/ceph-mgr.service.j2
roles/ceph-osd/templates/ceph-osd.service.j2
roles/ceph-rbd-mirror/templates/ceph-rbd-mirror.service.j2