mirror of
https://github.com/flatcar/scripts.git
synced 2025-08-24 07:51:03 +02:00
Merge pull request #1721 from vcaputo/prevent-disabling-selinux
app-emulation/docker: don't clobber --selinux-enabled
This commit is contained in:
commit
aac6a89952
@ -24,6 +24,10 @@ parse_docker_args() {
|
||||
ARG_DRIVER="$1"
|
||||
shift
|
||||
;;
|
||||
--selinux-enabled)
|
||||
ARG_SELINUX="$1"
|
||||
shift
|
||||
;;
|
||||
*)
|
||||
# ignore everything else
|
||||
;;
|
||||
@ -55,13 +59,15 @@ select_docker_driver() {
|
||||
esac
|
||||
}
|
||||
|
||||
maybe_disable_selinux() {
|
||||
# Enable selinux except when known to be unsupported (btrfs).
|
||||
maybe_enable_selinux() {
|
||||
case "${DOCKER_DRIVER}" in
|
||||
btrfs)
|
||||
USE_SELINUX=""
|
||||
;;
|
||||
*)
|
||||
# Leave enabled for everything else.
|
||||
# Enable for everything else.
|
||||
USE_SELINUX="--selinux-enabled"
|
||||
;;
|
||||
esac
|
||||
}
|
||||
@ -75,8 +81,10 @@ if [[ -z "${ARG_DRIVER}" && -z "${DOCKER_DRIVER}" ]]; then
|
||||
select_docker_driver
|
||||
fi
|
||||
|
||||
# Enable selinux except when known to be unsupported (btrfs).
|
||||
USE_SELINUX="--selinux-enabled"
|
||||
maybe_disable_selinux
|
||||
USE_SELINUX=""
|
||||
# Do not override selinux if it is already explicitly configured.
|
||||
if [[ -z "${ARG_SELINUX}" ]]; then
|
||||
maybe_enable_selinux
|
||||
fi
|
||||
|
||||
exec docker "$@" ${USE_SELINUX}
|
||||
|
Loading…
x
Reference in New Issue
Block a user