Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Add SELinux relabel option to bind mount volumes in local composer co…#11944

Merged
mekarpeles merged 3 commits into
internetarchive:masterinternetarchive/openlibrary:masterfrom
aczietlow:11874/hotfix/add-selinux-relabel-bind-mount-option-on-selinux-composeaczietlow/openlibrary:11874/hotfix/add-selinux-relabel-bind-mount-option-on-selinux-composeCopy head branch name to clipboard
May 5, 2026
Merged

Add SELinux relabel option to bind mount volumes in local composer co…#11944
mekarpeles merged 3 commits into
internetarchive:masterinternetarchive/openlibrary:masterfrom
aczietlow:11874/hotfix/add-selinux-relabel-bind-mount-option-on-selinux-composeaczietlow/openlibrary:11874/hotfix/add-selinux-relabel-bind-mount-option-on-selinux-composeCopy head branch name to clipboard

Conversation

@aczietlow

Copy link
Copy Markdown
Contributor

Fixes #11874

Fixes podman-compose working with SELinux enabled and enforced. This allows the application to build successfully and run on local systems with SELinux and podman-compose.

Technical

I added SELinux label options to local volume mounts in compose.selinux.yaml. This file can be applied to override the volume mounts, to add the z labels on Systems with SELinux enabled.

I'm actually unsure if this same issue would exist with docker. I've confirmed it is present with podman. I can try to test that if it's needed.

Testing

  1. with SELinux enabled and podman-compose installed
  2. cd to repo root working directory
  3. run podman-compose -f compose.yaml -f compose.override.yaml -f compose.selinux.yaml up -d
  4. confirm the absence of "permission denied" errors in the log output
  5. navigate to https://localhost:8080
  6. confirm application has successfully built and is running in a healthy state

Stakeholders

@mekarpeles

@mekarpeles
mekarpeles merged commit bb1e0ce into internetarchive:master May 5, 2026
3 checks passed
shoaib-inamdar pushed a commit to shoaib-inamdar/openlibrary that referenced this pull request May 6, 2026
internetarchive#11944)

* Add SELinux relabel option to bind mount volumes in local composer config
Sadashii pushed a commit to Sadashii/openlibrary that referenced this pull request May 11, 2026
internetarchive#11944)

* Add SELinux relabel option to bind mount volumes in local composer config
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Volume permission errors when using podman-compose and SELinux

2 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.