Comment 5 for bug 1802203

Revision history for this message
Cédric Jeanneret (cjeanner) wrote :

Back on that one.

So, in order to reproduce this one, we have to:
- deploy an undercloud that does not involve patches for the directory creation/setype (that's old, prior August, maybe even prior June)
- update to the latest version
- migrate from docker -> podman

We might want to involve "upgrade" people for that, in order to get some thoughts from them.

For now, if I deploy an undercloud with docker, using master, I get the following setype on the directories:
drwxr-xr-x. root root unconfined_u:object_r:container_file_t:s0 /var/lib/kolla/
drwxr-xr-x. root root unconfined_u:object_r:container_file_t:s0 /var/lib/kolla/config_files/
-rw-------. root root system_u:object_r:container_file_t:s0 glance_api.json

Those rights are OK for both docker and podman. Would be really great to get a reproducer on that, Jill :).