Skip to content

Setting sebool container_manage_cgroup #74

@debianmaster

Description

@debianmaster

vi roles/openshift_node/tasks/selinux_container_cgroup.yml

add when condition if selinux is disabled.

# Required in some selinux policy versions see
# https://bugzilla.redhat.com/show_bug.cgi?id=1587825
# https://bugzilla.redhat.com/show_bug.cgi?id=1549765
- name: Setting sebool container_manage_cgroup
  seboolean:
    name: container_manage_cgroup
    state: no
    persistent: yes
  when:
  - ansible_selinux
  - ansible_selinux.status == 'enabled'

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions