In StackHPC cloud tests we're checking the host's SELinux state matches the targeted state but we can't access what was defined upstream so we redefine 'selinux_state' in our group_vars - this must follow any upstream change.

maxstack · maxstack · commit 93af210181a5 · 2025-02-05T13:04:17.000Z
diff --git a/etc/kayobe/inventory/group_vars/all/selinux b/etc/kayobe/inventory/group_vars/all/selinux
@@ -0,0 +1,5 @@
+---
+# Target SELinux state
+# NOTE(MaxN) In StackHPC cloud tests we're checking the host's SELinux state matches the targeted state
+# but we can't access what was defined upstream so we redefine here - this must follow any upstream change.
+selinux_state: permissive
