On Sun, Oct 10, 2021 at 16:48, Ax Olmos
<ax@olmosconsulting.com> wrote:
The problem is that the ‘glusterd_brick_t’ file context is missing from selinux-policy-targeted 3.14.3-80 on CentOS 8 Stream.
It exists in the CentOS 8.4 version:
rpm -qpl selinux-policy-targeted-3.14.3-67.el8_4.2.noarch.rpm | grep gluster
/usr/share/selinux/targeted/default/active/modules/100/glusterd
/usr/share/selinux/targeted/default/active/modules/100/glusterd/cil
/usr/share/selinux/targeted/default/active/modules/100/glusterd/lang_ext
/var/lib/selinux/targeted/active/modules/100/glusterd
/var/lib/selinux/targeted/active/modules/100/glusterd/cil
/var/lib/selinux/targeted/active/modules/100/glusterd/hll
/var/lib/selinux/targeted/active/modules/100/glusterd/lang_ext
Not on CentOS 8 Stream:
rpm -qpl selinux-policy-targeted-3.14.3-80.el8.noarch.rpm | grep gluster
You can remove the selinux checks from:
/etc/ansible/roles/gluster.infra/roles/backend_setup/tasks/mount.yml
but I’m not sure of the implications of that.
This is a show stopper for oVirt and someone from oVirt needs to contact the CentOS 8 Stream maintainers and have them put the selinux context back, or come up with some other workaround.
_______________________________________________