search

rancher / rke2-selinux

RKE2 selinux + RPM packaging for selinux
Apache License 2.0
21 stars 21 forks source link

SLE Micro /opt/rke2/bin/rke2 support and fixing watch for TLS certs #48

Closed rdoxenham closed 1 year ago

rdoxenham commented 1 year ago

Adding support for /opt/rke2/bin/rke2, where the rke2 binary will reside on a transactional-update system and fixing rke2_service_t watch on container_var_lib_t. Fixes #47 in the process.

rdoxenham commented 1 year ago

@galal-hussein — thanks for your comments about this in issue #47. As I’m trying to fix the issue with SLE Micro, which has a 5.14.21 kernel and has been tested on that platform, I think this PR aligns with your requirements, and is very similar to the changes you’ve introduced for RHEL9 in #49. In addition, I also rebase the build to run on SLE BCI instead of CentOS, and introduce a further fix for platforms that have been provisioned through transactional-update (e.g. via combustion) where we shift the RKE2 bin* directory.