openstack/ironic-python-agent-builder
Code Issues Proposed changes

Merge "Force SELinux to be in permissive mode"

Browse Source
This commit is contained in:
Zuul 2020-11-09 16:53:04 +00:00 committed by Gerrit Code Review
commit d1d3a7e555
3 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
dib/ironic-python-agent-ramdisk/element-deps
View File

@ -6,5 +6,6 @@ package-installs
pip-and-virtualenv pip-and-virtualenv
pkg-map pkg-map
runtime-ssh-host-keys runtime-ssh-host-keys
selinux-permissive
source-repositories source-repositories
svc-map svc-map

3
doc/source/admin/dib.rst
View File

@ -123,8 +123,7 @@ The *dynamic-login* element allows the operator to inject an SSH key at boot
time via the kernel command line parameters: time via the kernel command line parameters:
* Add ``sshkey="ssh-rsa <your public key here>"`` to ``pxe_append_params`` * Add ``sshkey="ssh-rsa <your public key here>"`` to ``pxe_append_params``
setting in the ``ironic.conf`` file. Disabling SELinux is required for setting in the ``ironic.conf`` file.
systems where it is enabled, it can be done with ``selinux=0``.
.. warning:: Quotation marks around the public key are important! .. warning:: Quotation marks around the public key are important!

6
releasenotes/notes/selinux-permissive-a059f42bb66373a1.yaml Normal file
View File

@ -0,0 +1,6 @@
---
fixes:
- |
The DIB-based ramdisk is now always built with SELinux set to permissive.
Enabling SELinux may result in broken ramdisks and does not make much
sense for IPA anyway.