Thanks to visit codestin.com
Credit goes to github.com

Skip to content

We need to relabel newly created container volumes#23024

Merged
cpuguy83 merged 1 commit into
moby:masterfrom
rhatdan:selinux
Aug 26, 2016
Merged

We need to relabel newly created container volumes#23024
cpuguy83 merged 1 commit into
moby:masterfrom
rhatdan:selinux

Conversation

@rhatdan

@rhatdan rhatdan commented May 26, 2016

Copy link
Copy Markdown
Contributor

This will add a label to any volume that is shared into a container.

Signed-off-by: Dan Walsh [email protected]

@rhatdan

rhatdan commented May 26, 2016

Copy link
Copy Markdown
Contributor Author

@shishir-a412ed Could you try this out with docker-lvm-plugin. Works for me. :^)

@shishir-a412ed

shishir-a412ed commented May 27, 2016

Copy link
Copy Markdown
Contributor

@dwalsh works fine for me. I did this:

  1. docker volume create -d lvm --name selinux_labels --opt size=250M
  2. docker volume ls (This should list the selinux_labels logical volume created by our plugin)
  3. docker run -it -v selinux_lables:/run fedora /bin/bash
  4. Inside the container shell: ls -lZ
drwxr-xr-x.   2 root root system_u:object_r:svirt_sandbox_file_t:s0              6 May 27 15:05 run

@icecrime icecrime added the status/failing-ci Indicates that the PR in its current state fails the test suite label Jun 1, 2016
@crosbymichael

Copy link
Copy Markdown
Contributor

@rhatdan i believe the test failures are real and related to this change. It is the same tests on each of the checks that are failing.

@LK4D4

LK4D4 commented Aug 5, 2016

Copy link
Copy Markdown
Contributor

ping @rhatdan

@rhatdan

rhatdan commented Aug 8, 2016

Copy link
Copy Markdown
Contributor Author

I had forgotten about this one, Updated to upstream and will take a fresh look at this.

@thaJeztah thaJeztah removed the status/failing-ci Indicates that the PR in its current state fails the test suite label Aug 8, 2016
This will add a label to any volume that is shared into a container.

Signed-off-by: Dan Walsh <[email protected]>
@cpuguy83

Copy link
Copy Markdown
Member

Since the dir is part of the container's rootfs, why wouldn't this already be labeled?

@crosbymichael

Copy link
Copy Markdown
Contributor

LGTM

@cpuguy83 labels are applied per mountpoint

@cpuguy83

Copy link
Copy Markdown
Member

LGTM

@cpuguy83 cpuguy83 merged commit 6b4fd5f into moby:master Aug 26, 2016
@thaJeztah thaJeztah added this to the 1.13.0 milestone Sep 27, 2016
@cpuguy83 cpuguy83 mentioned this pull request Dec 2, 2016
runcom pushed a commit to projectatomic/docker that referenced this pull request Dec 4, 2016
Upstream reference: moby#23024
BZ#1401260

This will add a label to any volume that is shared into a container.

Signed-off-by: Dan Walsh <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants