particle-os/debian-forge
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

osbuild: make the entire /etc/selinux avaialble for the buildroot

Browse source 
When moving to `bootc install to-filesystem` we need more information
for bootc from /etc/selinux than our current /etc/selinux/targeted/contexts
policy.

This commit makes all of /etc/selinux available which unblocks
the bootc install.
This commit is contained in:
Michael Vogt 2024-03-20 17:02:04 +01:00 • committed by Ondřej Budai
parent f9eea44083
commit c5655c9006
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
osbuild/buildroot.py
View file

@ -246,8 +246,8 @@ class BuildRoot(contextlib.AbstractContextManager):
os.path.join(self._rootdir, "ostree"),
"/ostree"]
mounts += ["--ro-bind-try",
os.path.join(self._rootdir, "etc/selinux/targeted/contexts"),
"/etc/selinux/targeted/contexts"]
os.path.join(self._rootdir, "etc/selinux/"),
"/etc/selinux/"]
# We execute our own modules by bind-mounting them from the host into
# the build-root. We have minimal requirements on the build-root, so