tripleo-heat-templates/docker
Mike Fedosin dcdf75b94f Allow to run docker-puppet.py with SELinux enabled
In docker-puppet.py script we try to relable
/usr/share/openstack-puppet/modules by adding ":z" suffix
in the end.

Unfortunatelly this operation is not allowed in docker with
enabled SELinux. Docker's error message is:

Error response from daemon: error setting label on mount source
'/usr/share/openstack-puppet/modules': SELinux relabeling of
/usr/share/openstack-puppet/modules is not allowed:
"Relabeling content in /usr is not allowed.".

It leads to the fact that during the configuration the jobs fails
with "Permission denied - /usr/share/openstack-puppet/modules"

There is no need to relable that folder since it's read-only.
After removing ":z" it is possible to deploy the overcloud with
enabled SELinux.

Closes-Bug: #1807680

Change-Id: I11c7c5e9594fe0cdb2a114f81033651e411c9e3c
2018-12-10 10:28:18 +00:00
..
services Merge "Update kolla_config to deal with keystone fernet key rotation" 2018-12-08 20:57:26 +00:00
docker-puppet.py Allow to run docker-puppet.py with SELinux enabled 2018-12-10 10:28:18 +00:00
docker-toool Set ulimit for neutron agent containers 2018-04-06 21:54:17 +05:30
README-containers.md Replace outdated instruction with link to upstream doc 2017-07-10 16:32:58 +02:00