Browse Source

Allow barbican to access /opt/nfast when selinux is enforcing

Change-Id: I29deabd99efecadadfd1c91d3419c04226045f9c
changes/74/680074/3
Douglas Mendizábal 11 months ago
parent
commit
fba3cdcfd7
1 changed files with 7 additions and 0 deletions
  1. +7
    -0
      tasks/client.yaml

+ 7
- 0
tasks/client.yaml View File

@@ -18,6 +18,13 @@
create_home: true
home: /opt/nfast

- name: set selinux bool to allow barbican containers to access /opt/nfast
seboolean:
name: os_barbican_write_pki
state: yes
persistent: yes
when: ansible_os_family | lower = 'redhat'

- name: Download Thales client tarball
get_url:
url: "{{ thales_client_tarball_location }}"


Loading…
Cancel
Save