Skip to content

Use SelinuxContext.SHARED by default#7187

Merged
eddumelendez merged 10 commits intotestcontainers:mainfrom
jeroen-vd-nl:patch-2
Jun 20, 2023
Merged

Use SelinuxContext.SHARED by default#7187
eddumelendez merged 10 commits intotestcontainers:mainfrom
jeroen-vd-nl:patch-2

Conversation

@jeroen-vd-nl
Copy link
Contributor

@jeroen-vd-nl jeroen-vd-nl commented Jun 12, 2023

Followup on #6294

  • PR review done
  • Updated branch to latest testcontainers-java

Commits in total:

  • Use shared selinux context for filesystem binds (6294)
  • Update condition (6294)
  • Fix test (6294)
  • Fix format (6294)
  • Review feedback: only needs to mount on READ_WRITE access (new)
  • Update branch (new)

monosoul and others added 9 commits December 6, 2022 22:11
On systems with SElinux enforcing trying to bind a filesystem path without a context will result in an error. Using shared context by default will make `withFileSystemBind(String hostPath, String containerPath)` method work for all systems. On Windows, Mac OS and Linux systems without SElinux it will have no effect. On systems with SElinux enforcing it will make the path accessible to the container.

Signed-off-by: monosoul <Kloz.Klaud@gmail.com>
@jeroen-vd-nl jeroen-vd-nl requested a review from a team June 12, 2023 13:31
@jeroen-vd-nl
Copy link
Contributor Author

Update from our side: we can achieve the same result by using the local compose. Still this might be an addition to the code base, but for us the added value has vanished. Maybe for @monosul it still adds value.

@eddumelendez eddumelendez added this to the next milestone Jun 20, 2023
@eddumelendez eddumelendez changed the title selinux PR review update Use SelinuxContext.SHARED by default Jun 20, 2023
@eddumelendez eddumelendez merged commit 9220816 into testcontainers:main Jun 20, 2023
@eddumelendez
Copy link
Member

Thanks @jeroen-vd-nl !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants