[Pkg-libvirt-commits] [libguestfs] 51/87: builder: Add tip for how to relabel SELinux guest at build time.
Hilko Bengen
bengen at moszumanska.debian.org
Wed Feb 19 21:10:14 UTC 2014
This is an automated email from the git hooks/post-receive script.
bengen pushed a commit to branch debian
in repository libguestfs.
commit c4be51d08e7d8c54ba9134483390bfd6591a8ad5
Author: Richard W.M. Jones <rjones at redhat.com>
Date: Tue Jan 21 17:15:11 2014 +0000
builder: Add tip for how to relabel SELinux guest at build time.
Thanks: purpleidea/James.
(cherry picked from commit 20a4bfde9628cfeb8bea441cab7dcc94843b34e3)
---
builder/virt-builder.pod | 16 +++++++++++++++-
1 file changed, 15 insertions(+), 1 deletion(-)
diff --git a/builder/virt-builder.pod b/builder/virt-builder.pod
index e1d0748..55a0146 100644
--- a/builder/virt-builder.pod
+++ b/builder/virt-builder.pod
@@ -1302,7 +1302,21 @@ label, the guest templates have an empty file C</.autorelabel> and
this causes the guest to relabel itself at first boot.
This usually means that these guests will reboot themselves once the
-first time you use them. This is normal, and harmless.
+first time you use them. B<This is normal, and harmless.> However if
+you want to perform the relabelling at build time instead of delaying
+it to the first boot, you can boot the guest with the qemu
+I<-no-reboot> option (which means it will shut down after the relabel
+is complete without booting "for real"). Only do this if you are sure
+it is an SELinux guest:
+
+ qemu-system-x86_64 \
+ -no-reboot \
+ -nographic \
+ -machine accel=kvm:tcg \
+ -cpu host \
+ -m 2048 \
+ -drive file=disk.img,format=raw,if=virtio \
+ -serial stdio
(For further information on the topic of SELinux labelling, see:
L<https://www.redhat.com/archives/libguestfs/2014-January/msg00183.html>)
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-libvirt/libguestfs.git
More information about the Pkg-libvirt-commits
mailing list