chaoss / chaoss/grimoirelab

selinux issues running the pods

Open
#576 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
625
Forks
231
PR merge metrics
No merged PRs in 30d

Description

(Podman, Fedora 37).

I'm trying to run the basic example, using 'podman run' (instead of 'docker run'). It doesn't work and I'm trying to slowly address issues. At least one of them is related to selinux (maybe something I need to fix on my side!):
```
Feb 02 13:00:09 ykaul audisp-syslog[1601]: type=AVC msg=audit(1675335609.187:451): avc: denied { ioctl } for pid=18412 comm="sirmordred" path="/home/grimoire/conf/setup.cfg" dev="dm-3" ino=9716465 ioctlcmd=0x5401 scontext=system_u:system_r:container_t:s0:c841,c917 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
Feb 02 13:00:09 ykaul audisp-syslog[1601]: type=AVC msg=audit(1675335609.187:450): avc: denied { open } for pid=18412 comm="sirmordred" path="/home/grimoire/conf/setup.cfg" dev="dm-3" ino=9716465 scontext=system_u:system_r:container_t:s0:c841,c917 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
Feb 02 13:00:09 ykaul audisp-syslog[1601]: type=AVC msg=audit(1675335609.187:449): avc: denied { read } for pid=18412 comm="sirmordred" name="setup-docker.cfg" dev="dm-3" ino=9716465 scontext=system_u:system_r:container_t:s0:c841,c917 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
Feb 02 13:00:09 ykaul audit[18412]: AVC avc: denied { ioctl } for pid=18412 comm="sirmordred" path="/home/grimoire/conf/setup.cfg" dev="dm-3" ino=9716465 ioctlcmd=0x5401 scontext=system_u:system_r:container_t:s0:c841,c917 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
Feb 02 13:00:09 ykaul audit[18412]: AVC avc: denied { open } for pid=18412 comm="sirmordred" path="/home/grimoire/conf/setup.cfg" dev="dm-3" ino=9716465 scontext=system_u:system_r:container_t:s0:c841,c917 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
Feb 02 13:00:09 ykaul audit[18412]: AVC avc: denied { read } for pid=18412 comm="sirmordred" name="setup-docker.cfg" dev="dm-3" ino=9716465 scontext=system_u:system_r:container_t:s0:c841,c917 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.