Releases: rancher/rke2-selinux
Releases · rancher/rke2-selinux
v0.3.testing.1
Merge pull request #8 from Oats87/issues/rke2/386 Set the keep flag to 100000 so that we keep the last 100,000 RPMs
v0.2.testing.2
fix etcd failure to start on centos 8: (#7) addresses errors suchs as: `sudo ausearch -ts recent -c etcd` ``` ---- time->Fri Sep 4 23:20:53 2020 type=PROCTITLE msg=audit(1599261653.116:978): proctitle=65746364002D2D636F6E6669672D66696C653D2F7661722F6C69622F72616E636865722F726B65322F7365727665722F64622F657463642F636F6E666967 type=SYSCALL msg=audit(1599261653.116:978): arch=c000003e syscall=9 success=no exit=-13 a0=0 a1=280000000 a2=1 a3=8001 items=0 ppid=28621 pid=28674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="etcd" exe="/usr/local/bin/etcd" subj=system_u:system_r:rke2_service_db_t:s0:c240,c412 key=(null) type=AVC msg=audit(1599261653.116:978): avc: denied { map } for pid=28674 comm="etcd" path="/var/lib/rancher/rke2/server/db/etcd/member/snap/db" dev="vda1" ino=9135551 scontext=system_u:system_r:rke2_service_db_t:s0:c240,c412 tcontext=system_u:object_r:container_var_lib_t:s0 tclass=file permissive=0 ```
v0.2.testing.1
custom types for static pod containers (#6) Establish new types suitable for running static pods: - `rke2_service_t` - `rke2_service_db_t` Use `rke2_service_t` for all static pods that need read-only access to `container_var_lib_t` content under `/var/lib/rancher/rke2/server/{cred,tls}`. Use `rke2_service_db_t` for the etcd static pod as it needs the same read access as `rke2_service_t` as well as read/write access to `/var/lib/rancher/rke2/server/db`.
v0.2-rc2.testing.1: Merge pull request #4 from Oats87/el7-8
Publish el7_8
v0.2-rc1.testing.1: Merge pull request #2 from dweomer/filetrans-macro-and-vagrantfile
Pre-release
add a filetrans macro and vagrantfile for testing
v0.1.latest.1: Add rke2-selinux
Signed-off-by: Chris Kim <[email protected]>
v0.1.testing.1: Add rke2-selinux
Signed-off-by: Chris Kim <[email protected]>
v0.1-rc1.testing.1: Add rke2-selinux
Signed-off-by: Chris Kim <[email protected]>