Bug 1551127 - [Docs] Chapter 6: Add new section for SELinux to match cns-deploy requirements
Summary: [Docs] Chapter 6: Add new section for SELinux to match cns-deploy requirements
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Gluster Storage
Classification: Red Hat Storage
Component: doc-Container_Native_Storage_with_OpenShift
Version: cns-3.6
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
: ---
Assignee: storage-doc
QA Contact: Prasanth
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-03-02 20:33 UTC by Thom Carlin
Modified: 2021-11-18 15:47 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-11-18 15:47:12 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 1282336 0 medium CLOSED Ansible installer needs to turn on selinux boolean 'virt_sandbox_use_fusefs' 2021-02-22 00:41:40 UTC
Red Hat Bugzilla 1551121 0 unspecified CLOSED [Docs] Section 6.1: Firewall list doesn't match list for cns-deploy 2021-11-18 15:43:33 UTC
Red Hat Bugzilla 1551124 0 unspecified CLOSED [Docs] Section 6.2: Kernel module list does not match list given by cns-deploy 2021-11-18 15:45:30 UTC

Internal Links: 1282336 1551121 1551124

Description Thom Carlin 2018-03-02 20:33:17 UTC 
Document URL: 

https://access.redhat.com/documentation/en-us/red_hat_gluster_storage/3.3/html-single/container-native_storage_for_openshift_container_platform/#chap-Documentation-Container_Native_Storage

Section Number and Name: 

Chapter 6. Setting up Container-Native Storage

Describe the issue: 

No documentation on SELinux setup required by cns-deploy

Suggestions for improvement: 

Add a new section describing SELinux setup to support CNS.

Additional information: 

cns-deploy:
For systems with SELinux, the following settings need to be considered:
 * virt_sandbox_use_fusefs should be enabled on each node to allow writing to
   remote GlusterFS volumes

Please check with development for steps to be run on each node.
Comment 2 Thom Carlin 2018-03-02 20:34:50 UTC 
Encountered in OCP 3.7
Comment 3 Thom Carlin 2018-03-02 20:54:57 UTC 
https://bugzilla.redhat.com/show_bug.cgi?id=1282336 has:
* getsebool virt_sandbox_use_fusefs

Additionally, value can be enabled by: setsebool -P virt_sandbox_use_fusefs true
Note You need to log in before you can comment on or make changes to this bug.