Local Puppet Module Store and SELinux


In the documentation on Importing Puppet Modules [from Git] here:


…one of the examples shows how to use pulp-puppet-module-builder to create a local repository of modules that can then be imported (file:///path). The example includes creating a "/modules" directory on the local filesystem. However, the Celery process doesn't have access to read most locations by default (SELinux).

My workaround was to set my location's (/srv/puppet-modules) context to system_u:object_r:httpd_sys_content_t:s0.

I originally attempted to use celery_t, but SELinux wouldn't allow that.

Is there a better context for this?



> Is there a better context for this?

I don't think so. Folks at pulp-list might know better.

The policy lives here, make a pick yourself:

··· -- Later, Lukas #lzap Zapletal