Also adding zfs automount policy

This commit is contained in:
Ben Radey
2025-10-08 23:04:40 -04:00
parent 8ba303cde7
commit e1529dae90
2 changed files with 33 additions and 2 deletions
+9 -2
View File
@@ -14,13 +14,20 @@ FROM quay.io/fedora/fedora-silverblue:42
COPY --from=builder /gocryptfs/gocryptfs /usr/bin/gocryptfs
# Set up Synapse SELinux policy
# Set up custom SELinux policies
COPY synapse.te /tmp/synapse.te
COPY benZfsSnapshotAutomount.te /tmp/benZfsSnapshotAutomount.te
RUN checkmodule -M -m -o /tmp/synapse.mod /tmp/synapse.te \
&& semodule_package -o /tmp/synapse.pp -m /tmp/synapse.mod \
&& semodule -r synapse || true \
&& semodule -i /tmp/synapse.pp \
&& rm -f /tmp/synapse.{te,mod,pp}
&& rm -f /tmp/synapse.{te,mod,pp} \
&& checkmodule -M -m -o /tmp/benZfsSnapshotAutomount.mod /tmp/benZfsSnapshotAutomount.te \
&& semodule_package -o /tmp/benZfsSnapshotAutomount.pp -m /tmp/benZfsSnapshotAutomount.mod \
&& semodule -r benZfsSnapshotAutomount || true \
&& semodule -i /tmp/benZfsSnapshotAutomount.pp \
&& rm -f /tmp/benZfsSnapshotAutomount.{te,mod,pp}
# Install ZFS repository
RUN rpm-ostree install https://github.com/zfsonlinux/zfsonlinux.github.com/raw/master/fedora/zfs-release-2-8$(rpm --eval "%{dist}").noarch.rpm && \