Submitted 11 months ago by tester1121@lemmy.world to selfhosted@lemmy.world
I have a Podman container with Jellyfin running in it. It runs fine without SELinux, but it always crashes whenever SELinux is enabled. This will be an instance that will only be accessible in my private network.
Should I:
If I should figure out SELinux, please point me to some resources as I could not find anything easy enough for me through a simple Google search.
Personally I would lean towards finding out why its borking with SELinux and fixing that. It really shouldn’t be too hard. As others have mentioned it may be as simple as how you are mounting volumes into your containers - or it could be changing the SELinux context type for some files.
SELinux is one of the first things I disable. It causes way more problems than it solves.
All my workloads are containerised so I’ll trust the security of that machinery to sandbox them instead
You can also set SELinux to permissive mode. docs.fedoraproject.org/…/selinux-changing-states-…
This way it is basically disabled, but you can reenable it without any problems.
poVoq@slrpnk.net 11 months ago
Try mounting volumes with :z at the end.
But it is pretty easy to turn SELinux into permissive mode or disable it all together via the config file.
jonno@discuss.tchncs.de 11 months ago
Z or z. Depends on the scenario