services.setup: workaround podman symlink relabelling bug

cockpit-project · May 17, 2022 · b46fce2 · b46fce2
1 parent cb900e8
commit b46fce2
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/images/scripts/services.setup b/images/scripts/services.setup
@@ -35,6 +35,11 @@ EOF
 chmod 755 /root/run-freeipa
 /root/run-freeipa
 
+# HACK: Podman fails to relabel symlinks properly, accidentally relabelling their targets instead
+# https://github.com/opencontainers/selinux/pull/173
+# Disable relabelling for subsequent runs.
+sed -ie 's/data:Z/data/' /root/run-freeipa
+
 podman logs -f freeipa &
 LOGS=$!