Skip to content

Commit 1565a7b

Browse files
committed
Remove selinux confusion on fedora
1 parent dba1a76 commit 1565a7b

File tree

1 file changed

+0
-69
lines changed

1 file changed

+0
-69
lines changed

docs/src/install/on-fedora.md

Lines changed: 0 additions & 69 deletions
Original file line numberDiff line numberDiff line change
@@ -8,9 +8,6 @@ Exegol is installed through two main steps:
88
1. Install the Python wrapper (the "brains")
99
2. Install at least one Exegol image (the "muscle")
1010

11-
> [!WARNING]
12-
> SELinux is usually enabled by default on Fedora and is not supported by Exegol (yet). You may need to disable it on Docker, or set it to permissive mode for Exegol to work properly. Refer to the [Configure SELinux](#configure-selinux) part down at the bottom if needed.
13-
1411
## 1. Requirements
1512

1613
Git, Python3 and Pipx can be installed with the following command:
@@ -67,69 +64,3 @@ echo "alias exegol='sudo -E \$HOME/.local/bin/exegol'" >> ~/.bashrc && source ~/
6764
## 3. The rest
6865

6966
Once the requirements are installed, the main installation documentation can be followed, from [step "3. Activation"](/first-install#_3-activation).
70-
71-
## Configure SELinux
72-
73-
Create the following files
74-
75-
::: code-group
76-
77-
78-
```te [exegol_bint.te]
79-
module exegol_bint 1.0;
80-
81-
require {
82-
type container_t;
83-
type bin_t;
84-
class dir { create write getattr search open add_name };
85-
class file { create write getattr open execute };
86-
}
87-
88-
# Allow container to perform all operations on directories labeled as bin_t
89-
allow container_t bin_t:dir { create write getattr search open add_name };
90-
91-
# Allow container to perform all operations on files labeled as bin_t
92-
allow container_t bin_t:file { create write getattr open execute };
93-
```
94-
95-
```te [exegol_home.te]
96-
module exegol_home 1.0;
97-
98-
require {
99-
type container_t;
100-
type data_home_t;
101-
class file { ioctl entrypoint open execute read write getattr };
102-
}
103-
104-
#============= container_t ==============
105-
allow container_t data_home_t:file { ioctl entrypoint open execute read write getattr };
106-
```
107-
108-
```te [exegol_connectto.te]
109-
module exegol_connectto 1.0;
110-
111-
require {
112-
type container_t;
113-
type unconfined_t;
114-
class unix_stream_socket { connectto };
115-
}
116-
117-
# Allow container to perform connectto operation on unix_stream_socket
118-
allow container_t unconfined_t:unix_stream_socket { connectto };
119-
```
120-
:::
121-
122-
Run the following commands
123-
```
124-
checkmodule -M -m -o exegol_bint.mod exegol_bint.te
125-
semodule_package -o exegol_bint.pp -m exegol_bint.mod
126-
sudo semodule -i exegol_file-bint.pp
127-
128-
checkmodule -M -m -o exegol_home.mod exegol_home.te
129-
semodule_package -o exegol_home.pp -m exegol_home.mod
130-
sudo semodule -i exegol_home.pp
131-
132-
checkmodule -M -m -o exegol_ connectto.mod exegol_connectto.te
133-
semodule_package -o exegol_connectto.pp -m exegol_connectto.mod
134-
sudo semodule -i exegol_connectto.pp
135-
```

0 commit comments

Comments
 (0)