Local Puppet Module Store and SELinux

Support
1

Hello,

In the documentation on Importing Puppet Modules [from Git] here:

http://www.katello.org/docs/3.1/user_guide/puppet_integration/

…one of the examples shows how to use pulp-puppet-module-builder to create a local repository of modules that can then be imported (file:///path). The example includes creating a "/modules" directory on the local filesystem. However, the Celery process doesn't have access to read most locations by default (SELinux).

My workaround was to set my location's (/srv/puppet-modules) context to system_u:object_r:httpd_sys_content_t:s0.

I originally attempted to use celery_t, but SELinux wouldn't allow that.

Is there a better context for this?

Regards,

j

2

> Is there a better context for this?

I don't think so. Folks at pulp-list might know better.

The policy lives here, make a pick yourself:

··· -- Later, Lukas #lzap Zapletal