[why] some container services need umask 002 to work normally, cci-network.service need disabled or permissive selinux, or will have permission denied questions.
Signed-off-by: Liu Yinsi liuyinsi@163.com --- sparrow/0-package/common | 8 ++++++++ 1 file changed, 8 insertions(+)
diff --git a/sparrow/0-package/common b/sparrow/0-package/common index 2d7c9e3..01c32b2 100755 --- a/sparrow/0-package/common +++ b/sparrow/0-package/common @@ -27,6 +27,14 @@ cat >> /etc/modules-load.d/cifs <<EOF cifs EOF
+cat >> /etc/bashrc <<EOF +umask 002 +EOF + +source /etc/bashrc + +setenforce 0 + server_ip=$(ip route get 1.2.3.4 | awk '{print $7; exit}')
: ${DOCKER_REGISTRY_HOST:=$server_ip}
On Wed, Jan 27, 2021 at 08:29:30PM +0800, Liu Yinsi wrote:
[why] some container services need umask 002 to work normally, cci-network.service need disabled or permissive selinux, or will have permission denied questions.
Signed-off-by: Liu Yinsi liuyinsi@163.com
sparrow/0-package/common | 8 ++++++++ 1 file changed, 8 insertions(+)
diff --git a/sparrow/0-package/common b/sparrow/0-package/common index 2d7c9e3..01c32b2 100755 --- a/sparrow/0-package/common +++ b/sparrow/0-package/common @@ -27,6 +27,14 @@ cat >> /etc/modules-load.d/cifs <<EOF cifs EOF
+cat >> /etc/bashrc <<EOF +umask 002 +EOF
+source /etc/bashrc
+setenforce 0
The 'setenforce' command it's temporary.
Maybe should written to /etc/selinux/config file.
Thanks, Chenglong
server_ip=$(ip route get 1.2.3.4 | awk '{print $7; exit}')
: ${DOCKER_REGISTRY_HOST:=$server_ip}
2.23.0
-
Liu Yinsi -
Wang Chenglong