🐛 qontract-cli erv2: selinux and podman support (#4817)

app-sre · Jan 21, 2025 · fad0e58 · fad0e58
1 parent 208b36b
commit fad0e58
Showing 1 changed file with 12 additions and 12 deletions.
diff --git a/tools/cli_commands/erv2.py b/tools/cli_commands/erv2.py
@@ -185,10 +185,10 @@ def build_cdktf(self, credentials: Path) -> None:
                         "run",
                         "--name",
                         "erv2",
-                        "--mount",
-                        f"type=bind,source={input_file!s},target=/inputs/input.json",
-                        "--mount",
-                        f"type=bind,source={credentials!s},target=/credentials",
+                        "-v",
+                        f"{input_file!s}:/inputs/input.json:Z",
+                        "-v",
+                        f"{credentials!s}:/credentials:Z",
                         "-e",
                         "AWS_SHARED_CREDENTIALS_FILE=/credentials",
                         "--entrypoint",
@@ -236,10 +236,10 @@ def enter_shell(self, credentials: Path) -> None:
                     "erv2-debug-shell",
                     "--rm",
                     "-it",
-                    "--mount",
-                    f"type=bind,source={input_file!s},target=/inputs/input.json",
-                    "--mount",
-                    f"type=bind,source={credentials!s},target=/credentials",
+                    "-v",
+                    f"{input_file!s}:/inputs/input.json:Z",
+                    "-v",
+                    f"{credentials!s}:/credentials:Z",
                     "-e",
                     "AWS_SHARED_CREDENTIALS_FILE=/credentials",
                     "--entrypoint",
@@ -269,10 +269,10 @@ def force_unlock(self, credentials: Path, lock_id: str) -> None:
                     "--name",
                     "erv2-unlock",
                     "--rm",
-                    "--mount",
-                    f"type=bind,source={input_file!s},target=/inputs/input.json",
-                    "--mount",
-                    f"type=bind,source={credentials!s},target=/credentials",
+                    "-v",
+                    f"{input_file!s}:/inputs/input.json:Z",
+                    "-v",
+                    f"{credentials!s}:/credentials:Z",
                     "-e",
                     "AWS_SHARED_CREDENTIALS_FILE=/credentials",
                     "--entrypoint",