selinux: create Vagrantfile for SELinux

[Gekko0114]

In this PR, created Vagrantfile for an SELinux environment.

ref: #2850

[Gekko0114]

Hi @utam0k @YJDoc2
I've created a PR creating Vagrantfile for SELinux. Could you review it?

[YJDoc2]

Hey, I'll take a look and also validate the file works with virtualbox, as that's what I use.

[Gekko0114]

Hi @YJDoc2
I've fixed your comment. Could you review it again?

[YJDoc2]

Hey, so the vagrant box is working for me now. A couple of things -

1. We can remove the git clone command. We are already mounting the current directory in the box, and we would need that to do development, so no need to clone the repo.
2. How do I validate that SELinux is enabled and working as expected in the box? On my host, where I know selinux is disabled, I get from cargo run

selinux is not enabled
Failed to set enforce mode of SELinux: can't get selinux enforce path
default enforce mode is: disabled
current enforce mode is: disabled
Invalid format for SELinux label: unconfined

Error: Failed to set file label for SELinux: Failed to set_xattr: No data available (os error 61)

In the vagrant box I am getting

selinux is enabled
default enforce mode is: enforcing
current enforce mode is: enforcing
SELinux label of current process is: unconfined_u:unconfined_r:unconfined_t:s0-s0
Error: Failed to set file label for SELinux: Failed to set_xattr: Operation not supported (os error 95)

Is the last error ok? Is that issue with box setup or the demo code we have in the experimental crate?

Apart from this, it looks good. Thanks!

[Gekko0114]

Is the last error ok? Is that issue with box setup or the demo code we have in the experimental crate?

I've updated main.rs in this PR, so it has been fixed now.

We can remove the git clone command. We are already mounting the current directory in the box, and we would need that to do development, so no need to clone the repo.

Sure, then I will remove git clone.

[YJDoc2]

I've updated main.rs in this PR, so it has been fixed now.

Ok, great. Can I ask you to either rebase or do main merge?

Sure, then I will remove git clone.

Thanks!

Apart from these it looks good, so once you update, I'll approve and merge.

[Gekko0114]

Can I ask you to either rebase or do main merge?

Sure, then I will rebase and force push this PR later today

[Gekko0114]

Hi @YJDoc2
I've removed git command and rebased my branch. Could you review it ?

[YJDoc2]

Hey @Gekko0114 Thanks for updating. I'm still receiving the

Error: Failed to set file label for SELinux: Failed to set_xattr: Operation not supported (os error 95)

Error. Can this be an issue with my underlying system?
I am running vagrant up, then going into the /vagrant/youki dir and doing cargo run. Is that correct?

[Gekko0114]

Yes, it is correct. Did you run on this branch?
I updated main.rs and xattr.rs in this PR.

[YJDoc2]

Hmm, the issue was that with the directory mounting. When I copied the binary into /tmp it worked correctly as expected and sets the label. This is probably issue with mounting dirs into vagrant, not not with our code, so can ignore. Going ahead and merging this PR. Thanks a lot!

[YJDoc2]

What was the logic behind changing this from create to replace? What was the error otherwise?