Add TEST-06-SELINUX to mkosi integration tests #32588
Merged
Commits on May 3, 2024
-
test: Skip TEST-06-SELINUX early if not on fedora/centos
Other distributions may be able to install selinux but they are not expected to use it. The distribution is tested rather than whether selinux is enabled because it is expected to work on CentOS and Fedora and we want it to fail noisily.
-
mkosi: Disable selinux labelling and install policy in initramfs
It is necessary to install the selinux policy in the initramfs so that userland is entered with the correct label. SELinuxRelabel defaults to auto, which will skip if the relabelling command is not installed and will treat failure to relabel as non-fatal. We can't force it on because root privileges are required if the labels don't exist on the host system and we would like to be able to cross-build from other distributions. Since we are already committed to relabelling on first boot there is no value in even trying to label.
-
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.