From 999efa7376326fef5a26a60d1873ab4e8795d4a7 Mon Sep 17 00:00:00 2001
From: Steve Milner <smilner@redhat.com>
Date: Thu, 26 Oct 2017 20:27:19 -0400
Subject: crio: restorcon /var/lib/containers

When using the cri-o system container some items in /var/lib/containers
end up having incorrect labels. This runs restorecon -R
/var/lib/containers after the system container is installed.
---
 roles/docker/tasks/systemcontainer_crio.yml | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'roles')

diff --git a/roles/docker/tasks/systemcontainer_crio.yml b/roles/docker/tasks/systemcontainer_crio.yml
index 13bbd359e..ee2048f7a 100644
--- a/roles/docker/tasks/systemcontainer_crio.yml
+++ b/roles/docker/tasks/systemcontainer_crio.yml
@@ -166,6 +166,10 @@
     dest: /etc/cni/net.d/openshift-sdn.conf
     src: 80-openshift-sdn.conf.j2
 
+- name: Fix SELinux Permissions on /var/lib/containers
+  command: "restorecon -R /var/lib/containers/"
+  changed_when: false
+
 - name: Start the CRI-O service
   systemd:
     name: "cri-o"
-- 
cgit v1.2.3