From 86620eb213eb3d9805886785e174476712104319 Mon Sep 17 00:00:00 2001
From: Mathieu Velten <mathieu.velten@cern.ch>
Date: Fri, 23 Jun 2017 12:15:47 +0200
Subject: [PATCH] [cern] cvmfs: use virt_sandbox_use_fusefs instead of a custom
 policy

Change-Id: I4786ae1f8cbfc3df9f3930b4ba254ae6be1445e2
---
 magnum/drivers/common/templates/fragments/configure-cvmfs.sh | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/magnum/drivers/common/templates/fragments/configure-cvmfs.sh b/magnum/drivers/common/templates/fragments/configure-cvmfs.sh
index f52cbbc72..8266c29e7 100644
--- a/magnum/drivers/common/templates/fragments/configure-cvmfs.sh
+++ b/magnum/drivers/common/templates/fragments/configure-cvmfs.sh
@@ -12,9 +12,8 @@ chattr +i /
 
 atomic install gitlab-registry.cern.ch/cloud-infrastructure/docker-volume-cvmfs:${CVMFS_TAG:-latest}
 
-# add selinux policy
-docker cp docker-volume-cvmfs:/dockercvmfs.pp /tmp
-semodule -i /tmp/dockercvmfs.pp
+# allow containers to access fuse mounts
+setsebool virt_sandbox_use_fusefs true
 
 # install kubernetes volume plugin
 mkdir -p /var/lib/kubelet/plugins/volume/exec/cern~cvmfs
-- 
GitLab