tests/docker.base/user-no-caps: Set SELinux to permissive mode

With the current SELinux policy the docker daemon does not have access to the '/root' directory. Set SELinux to permisive mode so this test can run. Fixes runtime errors like these: Error response from daemon: OCI runtime create failed: "mkdir /var/lib/docker/overlay2/.../merged/root: permission denied Signed-off-by: Geoff Levand <[email protected]>
glevand · Mar 28, 2018 · 6559cd4 · 6559cd4
1 parent 3b30f3f
commit 6559cd4
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/kola/tests/docker/docker.go b/kola/tests/docker/docker.go
@@ -435,6 +435,11 @@ func dockerUserNoCaps(c cluster.TestCluster) {
 
 	genDockerContainer(c, m, "captest", []string{"capsh", "sh", "grep", "cat", "ls"})
 
+	// With the current SELinux policy the docker daemon does not have
+	// access to the '/root' directory.  Set SELinux to permisive mode
+	// so this test can run.
+	c.MustSSH(m, "sudo setenforce 0")
+
 	output := c.MustSSH(m, `docker run --user 1000:1000 \
 		-v /root:/root \
 		captest sh -c \