mirror of
https://github.com/containers/podman.git
synced 2025-10-19 12:12:36 +08:00
Use new syntax for selinux options in quadlet
Fixes: https://github.com/containers/podman/issues/23432 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
This commit is contained in:
@ -615,12 +615,12 @@ func ConvertContainer(container *parser.UnitFile, names map[string]string, isUse
|
|||||||
|
|
||||||
securityLabelDisable := container.LookupBooleanWithDefault(ContainerGroup, KeySecurityLabelDisable, false)
|
securityLabelDisable := container.LookupBooleanWithDefault(ContainerGroup, KeySecurityLabelDisable, false)
|
||||||
if securityLabelDisable {
|
if securityLabelDisable {
|
||||||
podman.add("--security-opt", "label:disable")
|
podman.add("--security-opt", "label=disable")
|
||||||
}
|
}
|
||||||
|
|
||||||
securityLabelNested := container.LookupBooleanWithDefault(ContainerGroup, KeySecurityLabelNested, false)
|
securityLabelNested := container.LookupBooleanWithDefault(ContainerGroup, KeySecurityLabelNested, false)
|
||||||
if securityLabelNested {
|
if securityLabelNested {
|
||||||
podman.add("--security-opt", "label:nested")
|
podman.add("--security-opt", "label=nested")
|
||||||
}
|
}
|
||||||
|
|
||||||
pidsLimit, ok := container.Lookup(ContainerGroup, KeyPidsLimit)
|
pidsLimit, ok := container.Lookup(ContainerGroup, KeyPidsLimit)
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
## assert-podman-final-args localhost/imagename
|
## assert-podman-final-args localhost/imagename
|
||||||
## assert-podman-args "--security-opt" "label:disable"
|
## assert-podman-args "--security-opt" "label=disable"
|
||||||
|
|
||||||
[Container]
|
[Container]
|
||||||
Image=localhost/imagename
|
Image=localhost/imagename
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
## assert-podman-args "--security-opt" "label:nested"
|
## assert-podman-args "--security-opt" "label=nested"
|
||||||
|
|
||||||
[Container]
|
[Container]
|
||||||
Image=localhost/imagename
|
Image=localhost/imagename
|
||||||
|
Reference in New Issue
Block a user