Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

adding custom selinux policy to taskotron client machines for qemu-kvm from buildslave

Browse source
This commit is contained in:
Tim Flink 2016-01-22 21:38:17 +00:00
parent f064a1f687
commit e50e8050b4
2 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/taskotron/taskotron-client/files/service-virt-transition.te Normal file
View file

@ -0,0 +1,4 @@
============= unconfined_service_t ==============
allow unconfined_service_t svirt_t:process transition;

12
roles/taskotron/taskotron-client/tasks/main.yml
View file

@ -58,6 +58,18 @@
file: path=/var/log/taskotron state=directory owner=root group={{ slaves_group }} mode=1775 file: path=/var/log/taskotron state=directory owner=root group={{ slaves_group }} mode=1775
when: deployment_type in ['dev', 'stg'] when: deployment_type in ['dev', 'stg']
- name: upload custom selinux policy to allow buildslaves to use qemu-kvm
copy: path=service-virt-transition.te dest=/root/service-virt-transition.te owner=root group=root mode=0644
when: deployment_type in ['dev', 'stg']
- name: compile selinux policy
command: chdir=/root/ creates/root/service-virt-transition.pp make -f /usr/share/selinux/devel/Makefile
when: deployment_type in ['dev', 'stg']
- name: load custom selinux policy for qemu-kvm from buildslaves
command: chdir=/root/ semodule -i /root/service-virt-transition.pp
when: deployment_type in ['dev', 'stg']
- name: enable libvirtd - name: enable libvirtd
service: name=libvirtd state=started enabled=yes service: name=libvirtd state=started enabled=yes
when: deployment_type in ['dev', 'stg'] when: deployment_type in ['dev', 'stg']