Skip to content

Conversation

@erl-hpe
Copy link
Contributor

@erl-hpe erl-hpe commented Nov 20, 2025

Pull Request Template

Checklist

  • My code follows the style guidelines of this project
  • I have added/updated comments where needed
  • [N/A] I have added tests that prove my fix is effective or my feature works
  • I have run make test (or equivalent) locally and all tests pass
  • DCO Sign-off: All commits are signed off (git commit -s) with my real name and email
  • REUSE Compliance:
    • Each new/modified source file has SPDX copyright and license headers
    • Any non-commentable files include a <filename>.license sidecar
    • All referenced licenses are present in the LICENSES/ directory

Description

This PR adds the :ro,Z options to the volume spec for Corefile in the coresmd-coredns container file for systemd. Without these options, coresmd-coredns may fail to read the Corefile on systems where SELinux is enabled. This happened to me while developing OpenCHAMI on vTDS and caused me to have to work around it by patching the container file. With the options, coresmd-coredns has read-only access to Corefile and can read in its configuration.

This was tested on vTDS and worked correctly. The container file without this change did not work.

Fixes #39

Type of Change

  • Bug fix
  • New feature
  • Breaking change
  • Documentation update

For more info, see Contributing Guidelines.

@alexlovelltroy alexlovelltroy merged commit d6b1fda into OpenCHAMI:main Nov 25, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: coresmd-coredns container cannot read Corefile reliably when SELinux access controls are in place

2 participants