From 9ab0050e6ec6ace2deb7712d7fde7a12bc466b75 Mon Sep 17 00:00:00 2001 From: Jiri Stransky Date: Mon, 13 Jul 2015 19:11:54 +0200 Subject: Ensure SELinux is permissive on Ceph OSDs Currently we build the overcloud image with selinux-permissive element in CI. However, even in environments where selinux-permissive element is not used, it should be ensured that SELinux is set to permissive mode on nodes with Ceph OSD [1]. We have no nice way to manage SELinux status via Puppet at the moment, so i'm resorting to execs, but with proper "onlyif" guards. [1] https://bugzilla.redhat.com/show_bug.cgi?id=1241422 Change-Id: I31bd685ad4800261fd317eef759bcfd285f2ba80 --- puppet/hieradata/ceph.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'puppet/hieradata') diff --git a/puppet/hieradata/ceph.yaml b/puppet/hieradata/ceph.yaml index 6eb0e671..18a48622 100644 --- a/puppet/hieradata/ceph.yaml +++ b/puppet/hieradata/ceph.yaml @@ -12,4 +12,6 @@ ceph_pools: - vms - images -ceph_classes: [] \ No newline at end of file +ceph_classes: [] + +ceph_osd_selinux_permissive: true -- cgit 1.2.3-korg