[PATCH compass-ci] sparrow/0-package: set umask and selinux
[why] some container services need umask 002 to work normally, cci-network.service need disabled or permissive selinux, or will have permission denied questions. Signed-off-by: Liu Yinsi <liuyinsi@163.com> --- sparrow/0-package/common | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/sparrow/0-package/common b/sparrow/0-package/common index 2d7c9e3..01c32b2 100755 --- a/sparrow/0-package/common +++ b/sparrow/0-package/common @@ -27,6 +27,14 @@ cat >> /etc/modules-load.d/cifs <<EOF cifs EOF +cat >> /etc/bashrc <<EOF +umask 002 +EOF + +source /etc/bashrc + +setenforce 0 + server_ip=$(ip route get 1.2.3.4 | awk '{print $7; exit}') : ${DOCKER_REGISTRY_HOST:=$server_ip} -- 2.23.0
On Tue, Jan 26, 2021 at 10:15:03AM +0800, Liu Yinsi wrote:
[why] some container services need umask 002 to work normally, cci-network.service need disabled or permissive selinux, or will have permission denied questions.
Signed-off-by: Liu Yinsi <liuyinsi@163.com> --- sparrow/0-package/common | 8 ++++++++ 1 file changed, 8 insertions(+)
diff --git a/sparrow/0-package/common b/sparrow/0-package/common index 2d7c9e3..01c32b2 100755 --- a/sparrow/0-package/common +++ b/sparrow/0-package/common @@ -27,6 +27,14 @@ cat >> /etc/modules-load.d/cifs <<EOF cifs EOF
+cat >> /etc/bashrc <<EOF +umask 002 +EOF + +source /etc/bashrc + +setenforce 0 +
test cci-network permission in machine, wether set selinux. Thanks, Jihui
server_ip=$(ip route get 1.2.3.4 | awk '{print $7; exit}')
: ${DOCKER_REGISTRY_HOST:=$server_ip} -- 2.23.0
participants (2)
-
Liu Yinsi -
Wei Jihui