Open tiran opened 2 years ago
Right, that's a generic podman issue with using volumes. In an interactive podman run ..
call one would use -v hostpath:containerpath:z
to relabel the files on the host with container_file_t
. podman-play-kube claims that it will give an SELinux shared label to hostPath
volumes, but apparently that's broken for you? I'm afraid there's nothing explicit that we can do in console.dot about that -- you either need to run this as root (which works fine, I've done it a lot to work around this bug), or explicitly chcon
the mounted paths.
make run
fails to run the test containers locally as non-root user on my system (Fedora 36, podman 4.2.0). The containers are unable to open some files from their volume mounts:The problem seems to be caused by SELinux violations. The files have wrong SELinux labels:
I tried to set the volume option
SELinuxRelabel: true
, but that doesn't fix the issue.