diff --git a/internal/distro/rhel86/pipelines.go b/internal/distro/rhel86/pipelines.go index bab9a57d9..81ebded0f 100644 --- a/internal/distro/rhel86/pipelines.go +++ b/internal/distro/rhel86/pipelines.go @@ -941,6 +941,7 @@ func anacondaTreePipeline(repos []rpmmd.RepoConfig, packages []rpmmd.PackageSpec "lunmask", "nfs", }))) + p.AddStage(osbuild.NewSELinuxConfigStage(&osbuild.SELinuxConfigStageOptions{State: osbuild.SELinuxStatePermissive})) return p } diff --git a/internal/distro/rhel90/pipelines.go b/internal/distro/rhel90/pipelines.go index 578707994..568c4785c 100644 --- a/internal/distro/rhel90/pipelines.go +++ b/internal/distro/rhel90/pipelines.go @@ -945,6 +945,7 @@ func anacondaTreePipeline(repos []rpmmd.RepoConfig, packages []rpmmd.PackageSpec "lunmask", "nfs", }))) + p.AddStage(osbuild.NewSELinuxConfigStage(&osbuild.SELinuxConfigStageOptions{State: osbuild.SELinuxStatePermissive})) return p } diff --git a/test/data/manifests/centos_8-aarch64-edge_installer-boot.json b/test/data/manifests/centos_8-aarch64-edge_installer-boot.json index 52f4ddbc7..3d575b61d 100644 --- a/test/data/manifests/centos_8-aarch64-edge_installer-boot.json +++ b/test/data/manifests/centos_8-aarch64-edge_installer-boot.json @@ -1272,6 +1272,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/centos_8-aarch64-image_installer-boot.json b/test/data/manifests/centos_8-aarch64-image_installer-boot.json index 9c5d7b1e0..e98ba2f73 100644 --- a/test/data/manifests/centos_8-aarch64-image_installer-boot.json +++ b/test/data/manifests/centos_8-aarch64-image_installer-boot.json @@ -1961,6 +1961,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/centos_8-x86_64-edge_installer-boot.json b/test/data/manifests/centos_8-x86_64-edge_installer-boot.json index 466c3bd20..1c8df1f14 100644 --- a/test/data/manifests/centos_8-x86_64-edge_installer-boot.json +++ b/test/data/manifests/centos_8-x86_64-edge_installer-boot.json @@ -1297,6 +1297,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/centos_8-x86_64-image_installer-boot.json b/test/data/manifests/centos_8-x86_64-image_installer-boot.json index 1069dd97f..0a2294869 100644 --- a/test/data/manifests/centos_8-x86_64-image_installer-boot.json +++ b/test/data/manifests/centos_8-x86_64-image_installer-boot.json @@ -1991,6 +1991,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/centos_9-aarch64-edge_installer-boot.json b/test/data/manifests/centos_9-aarch64-edge_installer-boot.json index 4372fcd5c..05ebeeba5 100644 --- a/test/data/manifests/centos_9-aarch64-edge_installer-boot.json +++ b/test/data/manifests/centos_9-aarch64-edge_installer-boot.json @@ -1307,6 +1307,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/centos_9-aarch64-image_installer-boot.json b/test/data/manifests/centos_9-aarch64-image_installer-boot.json index 9c13e6030..4ebdb047d 100644 --- a/test/data/manifests/centos_9-aarch64-image_installer-boot.json +++ b/test/data/manifests/centos_9-aarch64-image_installer-boot.json @@ -1919,6 +1919,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/centos_9-x86_64-edge_installer-boot.json b/test/data/manifests/centos_9-x86_64-edge_installer-boot.json index e3e9dc600..b260786c6 100644 --- a/test/data/manifests/centos_9-x86_64-edge_installer-boot.json +++ b/test/data/manifests/centos_9-x86_64-edge_installer-boot.json @@ -1335,6 +1335,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/centos_9-x86_64-image_installer-boot.json b/test/data/manifests/centos_9-x86_64-image_installer-boot.json index 1904ce1df..57fe82546 100644 --- a/test/data/manifests/centos_9-x86_64-image_installer-boot.json +++ b/test/data/manifests/centos_9-x86_64-image_installer-boot.json @@ -1956,6 +1956,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/rhel_86-aarch64-edge_installer-boot.json b/test/data/manifests/rhel_86-aarch64-edge_installer-boot.json index 6aa474ecf..baee2a5e7 100644 --- a/test/data/manifests/rhel_86-aarch64-edge_installer-boot.json +++ b/test/data/manifests/rhel_86-aarch64-edge_installer-boot.json @@ -1285,6 +1285,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/rhel_86-aarch64-image_installer-boot.json b/test/data/manifests/rhel_86-aarch64-image_installer-boot.json index 3a562b89a..5a9e7c92f 100644 --- a/test/data/manifests/rhel_86-aarch64-image_installer-boot.json +++ b/test/data/manifests/rhel_86-aarch64-image_installer-boot.json @@ -1994,6 +1994,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/rhel_86-x86_64-edge_installer-boot.json b/test/data/manifests/rhel_86-x86_64-edge_installer-boot.json index b4a59770e..7db3d6ac8 100644 --- a/test/data/manifests/rhel_86-x86_64-edge_installer-boot.json +++ b/test/data/manifests/rhel_86-x86_64-edge_installer-boot.json @@ -1312,6 +1312,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/rhel_86-x86_64-image_installer-boot.json b/test/data/manifests/rhel_86-x86_64-image_installer-boot.json index 38b4750ca..35096b0de 100644 --- a/test/data/manifests/rhel_86-x86_64-image_installer-boot.json +++ b/test/data/manifests/rhel_86-x86_64-image_installer-boot.json @@ -2027,6 +2027,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/rhel_90-aarch64-edge_installer-boot.json b/test/data/manifests/rhel_90-aarch64-edge_installer-boot.json index dcc28c15a..7b69812f4 100644 --- a/test/data/manifests/rhel_90-aarch64-edge_installer-boot.json +++ b/test/data/manifests/rhel_90-aarch64-edge_installer-boot.json @@ -1319,6 +1319,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/rhel_90-aarch64-image_installer-boot.json b/test/data/manifests/rhel_90-aarch64-image_installer-boot.json index c2922c369..5888f614c 100644 --- a/test/data/manifests/rhel_90-aarch64-image_installer-boot.json +++ b/test/data/manifests/rhel_90-aarch64-image_installer-boot.json @@ -1942,6 +1942,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/rhel_90-x86_64-edge_installer-boot.json b/test/data/manifests/rhel_90-x86_64-edge_installer-boot.json index 2a442d51a..a47d4e2a7 100644 --- a/test/data/manifests/rhel_90-x86_64-edge_installer-boot.json +++ b/test/data/manifests/rhel_90-x86_64-edge_installer-boot.json @@ -1341,6 +1341,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] }, diff --git a/test/data/manifests/rhel_90-x86_64-image_installer-boot.json b/test/data/manifests/rhel_90-x86_64-image_installer-boot.json index 1974f4e06..8a645dd4d 100644 --- a/test/data/manifests/rhel_90-x86_64-image_installer-boot.json +++ b/test/data/manifests/rhel_90-x86_64-image_installer-boot.json @@ -1973,6 +1973,12 @@ "/.buildstamp" ] } + }, + { + "type": "org.osbuild.selinux.config", + "options": { + "state": "permissive" + } } ] },