Description of problem: ovirt-node-plugin-vdsm sets a number of selinux rules (virt_use_nfs, virt_use_sanlock, etc). When running edit-node, these are not getting set correctly. Version-Release number of selected component (if applicable): 3.0.0 How reproducible: always Steps to Reproduce: 1.take base image and inject ovirt-node-plugin-vdsm 2.boot the image 3.check virt_use_nfs virt_use_sanlock sanlock_use_nfs booleans Actual results: all are off Expected results: all are on Additional info:
Created attachment 783361 [details] screenshot
These are all on by default since we turn them on in ovirt-node-selinux. It fails in edit-node since we disable selinux and setsebool won't run. A workaround is: Write the boolean into /etc/selinux/targeted/modules/active/booleans.local virt_use_nfs=1 I checked with selinux folks and that should work fine but filed a bz to add an offline option to make this easier.
This has been addressed with th selinux specific sub-package.