[PATCH v2 compass-ci] sparrow/0-package: set umask and selinux
[why] some container services need umask 002 to work normally, cci-network.service need disabled or permissive selinux, or will have permission denied questions. Signed-off-by: Liu Yinsi <liuyinsi@163.com> --- sparrow/0-package/common | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/sparrow/0-package/common b/sparrow/0-package/common index 2d7c9e3..01c32b2 100755 --- a/sparrow/0-package/common +++ b/sparrow/0-package/common @@ -27,6 +27,14 @@ cat >> /etc/modules-load.d/cifs <<EOF cifs EOF +cat >> /etc/bashrc <<EOF +umask 002 +EOF + +source /etc/bashrc + +setenforce 0 + server_ip=$(ip route get 1.2.3.4 | awk '{print $7; exit}') : ${DOCKER_REGISTRY_HOST:=$server_ip} -- 2.23.0
On Wed, Jan 27, 2021 at 08:29:30PM +0800, Liu Yinsi wrote:
[why] some container services need umask 002 to work normally, cci-network.service need disabled or permissive selinux, or will have permission denied questions.
Signed-off-by: Liu Yinsi <liuyinsi@163.com> --- sparrow/0-package/common | 8 ++++++++ 1 file changed, 8 insertions(+)
diff --git a/sparrow/0-package/common b/sparrow/0-package/common index 2d7c9e3..01c32b2 100755 --- a/sparrow/0-package/common +++ b/sparrow/0-package/common @@ -27,6 +27,14 @@ cat >> /etc/modules-load.d/cifs <<EOF cifs EOF
+cat >> /etc/bashrc <<EOF +umask 002 +EOF + +source /etc/bashrc + +setenforce 0
The 'setenforce' command it's temporary. Maybe should written to /etc/selinux/config file. Thanks, Chenglong
+ server_ip=$(ip route get 1.2.3.4 | awk '{print $7; exit}')
: ${DOCKER_REGISTRY_HOST:=$server_ip} -- 2.23.0
participants (2)
-
Liu Yinsi -
Wang Chenglong