Skip to content

Releases: rancher/rke2-selinux

v0.3.testing.1

05 Oct 01:43
d4411de
Compare
Choose a tag to compare
v0.3.testing.1 Pre-release
Pre-release
Merge pull request #8 from Oats87/issues/rke2/386

Set the keep flag to 100000 so that we keep the last 100,000 RPMs

v0.2.testing.2

04 Sep 23:30
55deab0
Compare
Choose a tag to compare
fix etcd failure to start on centos 8: (#7)

addresses errors suchs as: `sudo ausearch -ts recent -c etcd`
```
----
time->Fri Sep  4 23:20:53 2020
type=PROCTITLE msg=audit(1599261653.116:978): proctitle=65746364002D2D636F6E6669672D66696C653D2F7661722F6C69622F72616E636865722F726B65322F7365727665722F64622F657463642F636F6E666967
type=SYSCALL msg=audit(1599261653.116:978): arch=c000003e syscall=9 success=no exit=-13 a0=0 a1=280000000 a2=1 a3=8001 items=0 ppid=28621 pid=28674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="etcd" exe="/usr/local/bin/etcd" subj=system_u:system_r:rke2_service_db_t:s0:c240,c412 key=(null)
type=AVC msg=audit(1599261653.116:978): avc:  denied  { map } for pid=28674 comm="etcd" path="/var/lib/rancher/rke2/server/db/etcd/member/snap/db" dev="vda1" ino=9135551 scontext=system_u:system_r:rke2_service_db_t:s0:c240,c412 tcontext=system_u:object_r:container_var_lib_t:s0 tclass=file permissive=0
```

v0.2.testing.1

04 Sep 22:10
05866d5
Compare
Choose a tag to compare
v0.2.testing.1 Pre-release
Pre-release
custom types for static pod containers (#6)

Establish new types suitable for running static pods:
- `rke2_service_t`
- `rke2_service_db_t`

Use `rke2_service_t` for all static pods that need read-only access
to `container_var_lib_t` content under `/var/lib/rancher/rke2/server/{cred,tls}`.

Use `rke2_service_db_t` for the etcd static pod as it needs the same read
access as `rke2_service_t` as well as read/write access to `/var/lib/rancher/rke2/server/db`.

v0.2-rc2.testing.1: Merge pull request #4 from Oats87/el7-8

26 Aug 21:17
a95c72b
Compare
Choose a tag to compare
Publish el7_8

v0.2-rc1.testing.1: Merge pull request #2 from dweomer/filetrans-macro-and-vagrantfile

26 Aug 18:35
6c9c277
Compare
Choose a tag to compare
add a filetrans macro and vagrantfile for testing

v0.1.latest.1: Add rke2-selinux

23 Jul 18:31
Compare
Choose a tag to compare

v0.1.testing.1: Add rke2-selinux

23 Jul 18:23
Compare
Choose a tag to compare
Pre-release
Signed-off-by: Chris Kim <[email protected]>

v0.1-rc1.testing.1: Add rke2-selinux

23 Jul 18:05
Compare
Choose a tag to compare
Pre-release
Signed-off-by: Chris Kim <[email protected]>