services.setup: workaround podman symlink relabelling bug

cockpit-project · May 23, 2022 · c5fb264 · c5fb264
1 parent cb900e8
commit c5fb264
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/images/scripts/services.setup b/images/scripts/services.setup
@@ -35,6 +35,12 @@ EOF
 chmod 755 /root/run-freeipa
 /root/run-freeipa
 
+# HACK: Podman fails to relabel symlinks properly, accidentally relabelling their targets instead
+# https://github.com/opencontainers/selinux/pull/173
+# Disable relabelling for subsequent runs and make SELinux permissive.
+sed -i 's/data:Z/data/' /root/run-freeipa
+sed -i 's/enforcing/permissive/' /etc/selinux/config
+
 podman logs -f freeipa &
 LOGS=$!