Open Yarboa opened 1 month ago
I think i understand the issue
Looking at the tests running in ci gate it looks like
/tests/ffi/memory runs first, once test is done, container content left on disk
there is a chance the label will be reused, this is why we need to use
restorecon -rF /var/lib/container
on cleanup
Please refer this article https://opensource.com/article/18/2/selinux-labels-container-runtimes
Looking at ffi packet test results i see too many errors like this one
please see this output https://artifacts.dev.testing-farm.io/0f693132-db2f-43af-8363-e6d3196c1b73/work-ffikrs_25fp/plans/e2e/ffi/execute/data/guest/default-0/tests/ffi/qm-oom-score-adj-3/output.txt
Verify images are removed as per this