finallycoffee/matrix-docker-ansible-deploy
finallycoffee/matrix-docker-ansible-deploy
5
1
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Do not disable SELinux on RedHat systems

Browse Source 
It looks like SELinux can be left running without any (so far) negative
effects on our Matrix services.

There's no need to use `:z` or `:Z` options when mounting volumes either.
This means that files we create are labeled with a default context
(which may not be ideal if we only want them used from containers),
but it's compatible and doesn't cause issues.

Relabelling files is probably something we wish to stay away from,
especially for things like the media store, which contains lots of
files and is possibly on a fuse-mounted (S3/goofys) filesystem.
This commit is contained in:
Slavi Pantaleev 2018-12-20 15:21:45 +02:00
parent b9e5ad6c66
commit 9f163b2bf5
1 changed files with 0 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
roles/matrix-server/tasks/setup/setup_base.yml
View File

@ -79,7 +79,3 @@
name: "{{ 'ntpd' if ansible_os_family == 'RedHat' else 'ntp' }}" name: "{{ 'ntpd' if ansible_os_family == 'RedHat' else 'ntp' }}"
state: started state: started
enabled: yes enabled: yes
- name: Ensure SELinux disabled
selinux: state=disabled
when: ansible_os_family == 'RedHat'