opensource/podman
1
0
Fork 0
mirror of https://github.com/containers/podman.git synced 2025-10-16 18:53:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

Use new syntax for selinux options in quadlet

Browse Source 
Fixes: https://github.com/containers/podman/issues/23432

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
This commit is contained in:
Daniel J Walsh
2024-07-30 06:15:43 -04:00
parent 2316d914b5
commit 1c46686a41
3 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/systemd/quadlet/quadlet.go
View File

@ -615,12 +615,12 @@ func ConvertContainer(container *parser.UnitFile, names map[string]string, isUse
securityLabelDisable := container.LookupBooleanWithDefault(ContainerGroup, KeySecurityLabelDisable, false)
if securityLabelDisable {
podman.add("--security-opt", "label:disable")
podman.add("--security-opt", "label=disable")
}
securityLabelNested := container.LookupBooleanWithDefault(ContainerGroup, KeySecurityLabelNested, false)
if securityLabelNested {
podman.add("--security-opt", "label:nested")
podman.add("--security-opt", "label=nested")
}
pidsLimit, ok := container.Lookup(ContainerGroup, KeyPidsLimit)

2
test/e2e/quadlet/disableselinux.container
View File

@ -1,5 +1,5 @@
## assert-podman-final-args localhost/imagename
## assert-podman-args "--security-opt" "label:disable"
## assert-podman-args "--security-opt" "label=disable"
[Container]
Image=localhost/imagename

2
test/e2e/quadlet/nestedselinux.container
View File

@ -1,4 +1,4 @@
## assert-podman-args "--security-opt" "label:nested"
## assert-podman-args "--security-opt" "label=nested"
[Container]
Image=localhost/imagename