Skip to content
This repository was archived by the owner on Feb 26, 2023. It is now read-only.

Commit 3ffe983

Browse files
committed
fix: Tell systemd it's running in a container to prevent SELinux issues
1 parent 4223121 commit 3ffe983

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

bin/pojdectl

+1-1
Original file line numberDiff line numberDiff line change
@@ -325,7 +325,7 @@ apply)
325325
# Create the container if it doesn't already exist
326326
if [ ! -n "$(${DOCKER} ps -q -a -f name=${DOCKER_PREFIX}${name})" ]; then
327327
# Add addtional flags for systemd compatibility (not needed on podman)
328-
docker_systemd_flags="--tmpfs /tmp:exec --tmpfs /run:exec --tmpfs /run/lock:exec -v /sys/fs/cgroup:/sys/fs/cgroup:ro"
328+
docker_systemd_flags="-e container=oci --tmpfs /tmp:exec --tmpfs /run:exec --tmpfs /run/lock:exec -v /sys/fs/cgroup:/sys/fs/cgroup:ro"
329329
if [ "${PODMAN}" = "true" ]; then
330330
# Enable systemd to manipulate it's cgroups configuration
331331
sudo setsebool -P container_manage_cgroup true

0 commit comments

Comments
 (0)