-
Notifications
You must be signed in to change notification settings - Fork 120
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SELinux problems with libvirt provisioning instructions #544
Comments
I feel like this is addressed by the already existing TIP in the docs. Did you see the TIP? Did you skip that step? |
I think they're saying that even with the |
This is correct, the label doesn't work if you attempt to run a VM under system as described in the docs, as system session VMs don't appear to have access to I'll see if I can get the error exactly next chance I get to try this and detail the steps I used. |
Hmm, we might just need to clarify that if you're using the session libvirt, then it goes in |
The example commands for provisioning via libvirt don't work with the parameter
--connect="qemu:///system"
onvirt-install
, instead returning back a permission denied error on accessing thebacking_store
(${IMAGE}
) and the Ignition file (${IGNITION_CONFIG}
). From what I gather, this is because running the VM as system will fail to have access to the files even if configured withsvirt_home_t
and placed in the defaultsvirt_home_t
directories.The alternatives should either be:
/var/lib/libvirt/boot
(which is tagged asvirt_content_t
) but unsure what the best practice is here.--connect="qemu:///session"
instead or by removing the argument all together, as session is the default.The text was updated successfully, but these errors were encountered: