From 86620eb213eb3d9805886785e174476712104319 Mon Sep 17 00:00:00 2001 From: Mathieu Velten Date: Fri, 23 Jun 2017 12:15:47 +0200 Subject: [PATCH] [cern] cvmfs: use virt_sandbox_use_fusefs instead of a custom policy Change-Id: I4786ae1f8cbfc3df9f3930b4ba254ae6be1445e2 --- magnum/drivers/common/templates/fragments/configure-cvmfs.sh | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/magnum/drivers/common/templates/fragments/configure-cvmfs.sh b/magnum/drivers/common/templates/fragments/configure-cvmfs.sh index f52cbbc72..8266c29e7 100644 --- a/magnum/drivers/common/templates/fragments/configure-cvmfs.sh +++ b/magnum/drivers/common/templates/fragments/configure-cvmfs.sh @@ -12,9 +12,8 @@ chattr +i / atomic install gitlab-registry.cern.ch/cloud-infrastructure/docker-volume-cvmfs:${CVMFS_TAG:-latest} -# add selinux policy -docker cp docker-volume-cvmfs:/dockercvmfs.pp /tmp -semodule -i /tmp/dockercvmfs.pp +# allow containers to access fuse mounts +setsebool virt_sandbox_use_fusefs true # install kubernetes volume plugin mkdir -p /var/lib/kubelet/plugins/volume/exec/cern~cvmfs -- GitLab