Navigation Menu

Skip to content

Instantly share code, notes, and snippets.

@joshwget

joshwget/selinux-status.md

Last active March 16, 2017 18:08
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save joshwget/a9bfd2a0626055b6119611ed3c131221 to your computer and use it in GitHub Desktop.
Save joshwget/a9bfd2a0626055b6119611ed3c131221 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
selinux-status.md

Cattle Environments

Cattle environments will work with SELinux enabled by following the steps in https://gist.github.com/joshwget/413f45a31e42f1f23024558ba4c6a3f6. There are two manual steps in these docs. Eventually neither of these should be necessary.

  1. Modifying the host SELinux policy

Current workaround: Compile and load an SELinux module that allows Rancher IPSec networking to run.

Real solution: There is a bug in the RHEL SELinux policy that prevents Rancher IPsec from functioning. A patch has been submitted to upstream RHEL and is estimated to be available in 6 weeks.

  1. Loading necessary kernel modules

Current workaround: There are certain kernel modules that must be loaded prior to running Rancher.

Real solution: These modules should be loaded automatically by Rancher Agent. A definitive list of needed modules must be determined (either Josh or Darren will do this).

Kubernetes Environments

There is some work to be done in Rancher in addition to the steps for Cattle environments to make Kubernetes work. This is tracked in rancher/rancher#8071 and it's currently assigned to James.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment