From b46fce2cd669adc0c5dc6197ff27de5a95dc5fb2 Mon Sep 17 00:00:00 2001
From: Allison Karlitskaya <allison.karlitskaya@redhat.com>
Date: Tue, 17 May 2022 14:13:31 +0200
Subject: [PATCH] services.setup: workaround podman symlink relabelling bug

---
 images/scripts/services.setup | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/images/scripts/services.setup b/images/scripts/services.setup
index b4e40f5074..c7eb92110d 100755
--- a/images/scripts/services.setup
+++ b/images/scripts/services.setup
@@ -35,6 +35,11 @@ EOF
 chmod 755 /root/run-freeipa
 /root/run-freeipa
 
+# HACK: Podman fails to relabel symlinks properly, accidentally relabelling their targets instead
+# https://github.com/opencontainers/selinux/pull/173
+# Disable relabelling for subsequent runs.
+sed -ie 's/data:Z/data/' /root/run-freeipa
+
 podman logs -f freeipa &
 LOGS=$!