3 ms·
SELinux-related permission errors are an endless nuisance with podman and quadlet. If you want to sandbox about anything it's easier to create a pod with full h
by anilakar 1y ago
SELinux-related permission errors are an endless nuisance with podman and quadlet. If you want to sandbox about anything it's easier to create a pod with full host permissions and necessary /dev/ files mounted, running a simple program that exposes minimal functionality over an isolated container network.
- Aluminum0643 1y agoUdica, plus maybe ausearch | audit2allow -C, makes it easy to generate SELinux policies for containers (works great for me on RHEL10-like distros) https://www.redhat.com/en/blog/generate-selinux-policies-containers-with-udica https://www.redhat.com/en/blog/generate-selinux-policies-con...