[chef] Re: Re: Re: Re: Re: Community cookbook & SELinux Configuration


Chronological Thread 
  • From: Sean OMeara < >
  • To: " " < >
  • Subject: [chef] Re: Re: Re: Re: Re: Community cookbook & SELinux Configuration
  • Date: Thu, 15 Jan 2015 12:12:43 -0500

Here's how you put platform specific loosely coupled dependencies into
test-kitchen runs

selinux::disabled
https://github.com/chef-cookbooks/mysql/blob/master/.kitchen.yml#L12

apt
https://github.com/chef-cookbooks/mysql/blob/master/.kitchen.yml#L25

-s

On Thu, Jan 15, 2015 at 5:20 AM, Greg Barker 
< >
 wrote:
> Thanks Julian! That fix worked great for me.
>
> On Wed, Jan 14, 2015 at 9:39 PM, Julian C. Dunn 
> < >
>  wrote:
>>
>> Apparently CentOS 6.6 shipped with a broken anaconda that ignores the
>> setting in ks.cfg.
>>
>> If you can give me a +1 to this I'll merge it:
>https://github.com/opscode/bento/pull/306
>>
>> - Julian
>>
>> On Wed, Jan 14, 2015 at 11:31 PM, Greg Barker 
>> < >
>> wrote:
>> > Hmmm, I'm actually using the CentOS 6.6 bento box. It looks like SELinux
>> > is
>> > supposed to be permissive?
>> >
>> > I just tried with a simple Vagrantfile:
>> >
>> > Vagrant.configure("2") do |config|
>> >   config.vm.box = "opscode-centos-6.6"
>> >   config.vm.box_url =
>> >
>> > "http://opscode-vm-bento.s3.amazonaws.com/vagrant/virtualbox/opscode_centos-6.6_chef-provisionerless.box";
>> > end
>> >
>> > Is this what I'm supposed to be seeing with that box?
>> >
>> > $ vagrant up
>> > $ vagrant ssh
>> > 
>> >  ~]$ getenforce
>> > Enforcing
>> > 
>> >  ~]$ cat /etc/selinux/config
>> >
>> > # This file controls the state of SELinux on the system.
>> > # SELINUX= can take one of these three values:
>> > #     enforcing - SELinux security policy is enforced.
>> > #     permissive - SELinux prints warnings instead of enforcing.
>> > #     disabled - No SELinux policy is loaded.
>> > SELINUX=enforcing
>> > # SELINUXTYPE= can take one of these two values:
>> > #     targeted - Targeted processes are protected,
>> > #     mls - Multi Level Security protection.
>> > SELINUXTYPE=targeted
>
>



Archive powered by MHonArc 2.6.16.

§