{"action":"created","comment":{"url":"https://api.github.com/repos/openshift/origin/pulls/comments/22865680","id":22865680,"diff_hunk":"@@ -11,18 +11,52 @@ https://github.com/openshift/origin/blob/master/examples/sample-app/container-se\n \n Setup\n -----\n-Before running these steps, you'll need to configure the docker daemon on your host to trust the docker registry service you'll be starting.\n+At this stage of OpenShift 3 development, there are a few things that you will need to configure on the host where OpenShift is running in order for things to work.\n+\n+- - -\n+\n+**NOTE:** You do not need to do this is you are using [Vagrant](https://vagrantup.com/) to work with OpenShift (see the [Vagrantfile](https://github.com/openshift/origin/blob/master/Vagrantfile) for more info). These changes are only necessary when you have set up the host system yourself.\n+\n+- - -\n+\n+### Docker Changes ###\n+\n+First, you'll need to configure the docker daemon on your host to trust the docker registry service you'll be starting.\n \n To do this, you need to add \"--insecure-registry 172.30.17.0/24\" to the docker daemon invocation, eg:\n-        \n-        $ docker -d --insecure-registry 172.30.17.0/24\n \n-If you are running docker as a service via systemd, you can add this argument to the options value in `/etc/sysconfig/docker`\n+    $ docker -d --insecure-registry 172.30.17.0/24\n+\n+If you are running docker as a service via `systemd`, you can add this argument to the options value in `/etc/sysconfig/docker`\n \n This will instruct the docker daemon to trust any docker registry on the 172.30.17.0/24 subnet, rather than requiring a certificate.\n \n These instructions assume you have not changed the kubernetes/openshift service subnet configuration from the default value of 172.30.17.0/24.\n \n+### SELinux Changes ###\n+\n+Presently the OpenShift 3 policies for SELinux are a work in progress. For the time being, to play around with the OpenShift system, it is easiest to downgrade the SELinux security level to 'permissive'. To do this, modify /etc/sysconfig/selinux as root and change the security level:\n+\n+    $ sudo vi /etc/sysconfig/selinux\n+\n+And change:\n+\n+    SELINUX=enforcing\n+\n+To:\n+\n+    SELINUX=permissive\n+\n+### FirewallD Changes ###\n+\n+Similar to our work on SELinux policies, the OpenShift firewalld rules are also a work in progress. For now it is easiest to disable firewalld altogether:\n+\n+    $ sudo systemctl stop firewalld\n+    $ sudo systemctl disable firewalld\n+\n+### Reboot and Run ###\n+\n+Reboot your system and you will be ready to play with this OpenShift sample application.","path":"examples/sample-app/README.md","position":53,"original_position":53,"commit_id":"d6bb9c24e1406fab109e5fc82c121930a89e9619","original_commit_id":"d6bb9c24e1406fab109e5fc82c121930a89e9619","user":{"login":"bparees","id":4974046,"avatar_url":"https://avatars.githubusercontent.com/u/4974046?v=3","gravatar_id":"","url":"https://api.github.com/users/bparees","html_url":"https://github.com/bparees","followers_url":"https://api.github.com/users/bparees/followers","following_url":"https://api.github.com/users/bparees/following{/other_user}","gists_url":"https://api.github.com/users/bparees/gists{/gist_id}","starred_url":"https://api.github.com/users/bparees/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bparees/subscriptions","organizations_url":"https://api.github.com/users/bparees/orgs","repos_url":"https://api.github.com/users/bparees/repos","events_url":"https://api.github.com/users/bparees/events{/privacy}","received_events_url":"https://api.github.com/users/bparees/received_events","type":"User","site_admin":false},"body":"There's no need to reboot if you just run \"setenforce 0\"\r\n","created_at":"2015-01-13T14:46:47Z","updated_at":"2015-01-13T14:46:47Z","html_url":"https://github.com/openshift/origin/pull/646#discussion_r22865680","pull_request_url":"https://api.github.com/repos/openshift/origin/pulls/646","_links":{"self":{"href":"https://api.github.com/repos/openshift/origin/pulls/comments/22865680"},"html":{"href":"https://github.com/openshift/origin/pull/646#discussion_r22865680"},"pull_request":{"href":"https://api.github.com/repos/openshift/origin/pulls/646"}}},"pull_request":{"url":"https://api.github.com/repos/openshift/origin/pulls/646","id":27275126,"html_url":"https://github.com/openshift/origin/pull/646","diff_url":"https://github.com/openshift/origin/pull/646.diff","patch_url":"https://github.com/openshift/origin/pull/646.patch","issue_url":"https://api.github.com/repos/openshift/origin/issues/646","number":646,"state":"open","locked":false,"title":"Added info about necessary SELinux & firewalld setup","user":{"login":"nhr","id":1874097,"avatar_url":"https://avatars.githubusercontent.com/u/1874097?v=3","gravatar_id":"","url":"https://api.github.com/users/nhr","html_url":"https://github.com/nhr","followers_url":"https://api.github.com/users/nhr/followers","following_url":"https://api.github.com/users/nhr/following{/other_user}","gists_url":"https://api.github.com/users/nhr/gists{/gist_id}","starred_url":"https://api.github.com/users/nhr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nhr/subscriptions","organizations_url":"https://api.github.com/users/nhr/orgs","repos_url":"https://api.github.com/users/nhr/repos","events_url":"https://api.github.com/users/nhr/events{/privacy}","received_events_url":"https://api.github.com/users/nhr/received_events","type":"User","site_admin":false},"body":"@bparees or @deads2k please review.","created_at":"2015-01-13T14:38:52Z","updated_at":"2015-01-13T14:46:47Z","closed_at":null,"merged_at":null,"merge_commit_sha":"f61cc7bf170cf01e175e16cb66220122d642f399","assignee":null,"milestone":null,"commits_url":"https://api.github.com/repos/openshift/origin/pulls/646/commits","review_comments_url":"https://api.github.com/repos/openshift/origin/pulls/646/comments","review_comment_url":"https://api.github.com/repos/openshift/origin/pulls/comments/{number}","comments_url":"https://api.github.com/repos/openshift/origin/issues/646/comments","statuses_url":"https://api.github.com/repos/openshift/origin/statuses/d6bb9c24e1406fab109e5fc82c121930a89e9619","head":{"label":"nhr:added_sample_app_prerun_info","ref":"added_sample_app_prerun_info","sha":"d6bb9c24e1406fab109e5fc82c121930a89e9619","user":{"login":"nhr","id":1874097,"avatar_url":"https://avatars.githubusercontent.com/u/1874097?v=3","gravatar_id":"","url":"https://api.github.com/users/nhr","html_url":"https://github.com/nhr","followers_url":"https://api.github.com/users/nhr/followers","following_url":"https://api.github.com/users/nhr/following{/other_user}","gists_url":"https://api.github.com/users/nhr/gists{/gist_id}","starred_url":"https://api.github.com/users/nhr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nhr/subscriptions","organizations_url":"https://api.github.com/users/nhr/orgs","repos_url":"https://api.github.com/users/nhr/repos","events_url":"https://api.github.com/users/nhr/events{/privacy}","received_events_url":"https://api.github.com/users/nhr/received_events","type":"User","site_admin":false},"repo":{"id":22930277,"name":"origin","full_name":"nhr/origin","owner":{"login":"nhr","id":1874097,"avatar_url":"https://avatars.githubusercontent.com/u/1874097?v=3","gravatar_id":"","url":"https://api.github.com/users/nhr","html_url":"https://github.com/nhr","followers_url":"https://api.github.com/users/nhr/followers","following_url":"https://api.github.com/users/nhr/following{/other_user}","gists_url":"https://api.github.com/users/nhr/gists{/gist_id}","starred_url":"https://api.github.com/users/nhr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nhr/subscriptions","organizations_url":"https://api.github.com/users/nhr/orgs","repos_url":"https://api.github.com/users/nhr/repos","events_url":"https://api.github.com/users/nhr/events{/privacy}","received_events_url":"https://api.github.com/users/nhr/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/nhr/origin","description":"OpenShift 3 - build, deploy, and manage your applications with Docker and Kubernetes","fork":true,"url":"https://api.github.com/repos/nhr/origin","forks_url":"https://api.github.com/repos/nhr/origin/forks","keys_url":"https://api.github.com/repos/nhr/origin/keys{/key_id}","collaborators_url":"https://api.github.com/repos/nhr/origin/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/nhr/origin/teams","hooks_url":"https://api.github.com/repos/nhr/origin/hooks","issue_events_url":"https://api.github.com/repos/nhr/origin/issues/events{/number}","events_url":"https://api.github.com/repos/nhr/origin/events","assignees_url":"https://api.github.com/repos/nhr/origin/assignees{/user}","branches_url":"https://api.github.com/repos/nhr/origin/branches{/branch}","tags_url":"https://api.github.com/repos/nhr/origin/tags","blobs_url":"https://api.github.com/repos/nhr/origin/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/nhr/origin/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/nhr/origin/git/refs{/sha}","trees_url":"https://api.github.com/repos/nhr/origin/git/trees{/sha}","statuses_url":"https://api.github.com/repos/nhr/origin/statuses/{sha}","languages_url":"https://api.github.com/repos/nhr/origin/languages","stargazers_url":"https://api.github.com/repos/nhr/origin/stargazers","contributors_url":"https://api.github.com/repos/nhr/origin/contributors","subscribers_url":"https://api.github.com/repos/nhr/origin/subscribers","subscription_url":"https://api.github.com/repos/nhr/origin/subscription","commits_url":"https://api.github.com/repos/nhr/origin/commits{/sha}","git_commits_url":"https://api.github.com/repos/nhr/origin/git/commits{/sha}","comments_url":"https://api.github.com/repos/nhr/origin/comments{/number}","issue_comment_url":"https://api.github.com/repos/nhr/origin/issues/comments/{number}","contents_url":"https://api.github.com/repos/nhr/origin/contents/{+path}","compare_url":"https://api.github.com/repos/nhr/origin/compare/{base}...{head}","merges_url":"https://api.github.com/repos/nhr/origin/merges","archive_url":"https://api.github.com/repos/nhr/origin/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/nhr/origin/downloads","issues_url":"https://api.github.com/repos/nhr/origin/issues{/number}","pulls_url":"https://api.github.com/repos/nhr/origin/pulls{/number}","milestones_url":"https://api.github.com/repos/nhr/origin/milestones{/number}","notifications_url":"https://api.github.com/repos/nhr/origin/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/nhr/origin/labels{/name}","releases_url":"https://api.github.com/repos/nhr/origin/releases{/id}","created_at":"2014-08-13T20:30:11Z","updated_at":"2015-01-13T13:55:16Z","pushed_at":"2015-01-13T14:37:53Z","git_url":"git://github.com/nhr/origin.git","ssh_url":"git@github.com:nhr/origin.git","clone_url":"https://github.com/nhr/origin.git","svn_url":"https://github.com/nhr/origin","homepage":"https://openshift.github.io","size":19986,"stargazers_count":0,"watchers_count":0,"language":"Go","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"openshift:master","ref":"master","sha":"3a68dcf57b0eeece2168ae8245b25a98ce6363a0","user":{"login":"openshift","id":792337,"avatar_url":"https://avatars.githubusercontent.com/u/792337?v=3","gravatar_id":"","url":"https://api.github.com/users/openshift","html_url":"https://github.com/openshift","followers_url":"https://api.github.com/users/openshift/followers","following_url":"https://api.github.com/users/openshift/following{/other_user}","gists_url":"https://api.github.com/users/openshift/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift/subscriptions","organizations_url":"https://api.github.com/users/openshift/orgs","repos_url":"https://api.github.com/users/openshift/repos","events_url":"https://api.github.com/users/openshift/events{/privacy}","received_events_url":"https://api.github.com/users/openshift/received_events","type":"Organization","site_admin":false},"repo":{"id":22442668,"name":"origin","full_name":"openshift/origin","owner":{"login":"openshift","id":792337,"avatar_url":"https://avatars.githubusercontent.com/u/792337?v=3","gravatar_id":"","url":"https://api.github.com/users/openshift","html_url":"https://github.com/openshift","followers_url":"https://api.github.com/users/openshift/followers","following_url":"https://api.github.com/users/openshift/following{/other_user}","gists_url":"https://api.github.com/users/openshift/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift/subscriptions","organizations_url":"https://api.github.com/users/openshift/orgs","repos_url":"https://api.github.com/users/openshift/repos","events_url":"https://api.github.com/users/openshift/events{/privacy}","received_events_url":"https://api.github.com/users/openshift/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/openshift/origin","description":"OpenShift 3 - build, deploy, and manage your applications with Docker and Kubernetes","fork":false,"url":"https://api.github.com/repos/openshift/origin","forks_url":"https://api.github.com/repos/openshift/origin/forks","keys_url":"https://api.github.com/repos/openshift/origin/keys{/key_id}","collaborators_url":"https://api.github.com/repos/openshift/origin/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/openshift/origin/teams","hooks_url":"https://api.github.com/repos/openshift/origin/hooks","issue_events_url":"https://api.github.com/repos/openshift/origin/issues/events{/number}","events_url":"https://api.github.com/repos/openshift/origin/events","assignees_url":"https://api.github.com/repos/openshift/origin/assignees{/user}","branches_url":"https://api.github.com/repos/openshift/origin/branches{/branch}","tags_url":"https://api.github.com/repos/openshift/origin/tags","blobs_url":"https://api.github.com/repos/openshift/origin/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/openshift/origin/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/openshift/origin/git/refs{/sha}","trees_url":"https://api.github.com/repos/openshift/origin/git/trees{/sha}","statuses_url":"https://api.github.com/repos/openshift/origin/statuses/{sha}","languages_url":"https://api.github.com/repos/openshift/origin/languages","stargazers_url":"https://api.github.com/repos/openshift/origin/stargazers","contributors_url":"https://api.github.com/repos/openshift/origin/contributors","subscribers_url":"https://api.github.com/repos/openshift/origin/subscribers","subscription_url":"https://api.github.com/repos/openshift/origin/subscription","commits_url":"https://api.github.com/repos/openshift/origin/commits{/sha}","git_commits_url":"https://api.github.com/repos/openshift/origin/git/commits{/sha}","comments_url":"https://api.github.com/repos/openshift/origin/comments{/number}","issue_comment_url":"https://api.github.com/repos/openshift/origin/issues/comments/{number}","contents_url":"https://api.github.com/repos/openshift/origin/contents/{+path}","compare_url":"https://api.github.com/repos/openshift/origin/compare/{base}...{head}","merges_url":"https://api.github.com/repos/openshift/origin/merges","archive_url":"https://api.github.com/repos/openshift/origin/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/openshift/origin/downloads","issues_url":"https://api.github.com/repos/openshift/origin/issues{/number}","pulls_url":"https://api.github.com/repos/openshift/origin/pulls{/number}","milestones_url":"https://api.github.com/repos/openshift/origin/milestones{/number}","notifications_url":"https://api.github.com/repos/openshift/origin/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/openshift/origin/labels{/name}","releases_url":"https://api.github.com/repos/openshift/origin/releases{/id}","created_at":"2014-07-30T20:04:05Z","updated_at":"2015-01-13T13:37:06Z","pushed_at":"2015-01-13T13:37:06Z","git_url":"git://github.com/openshift/origin.git","ssh_url":"git@github.com:openshift/origin.git","clone_url":"https://github.com/openshift/origin.git","svn_url":"https://github.com/openshift/origin","homepage":"https://openshift.github.io","size":33453,"stargazers_count":229,"watchers_count":229,"language":"Go","has_issues":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":118,"mirror_url":null,"open_issues_count":60,"forks":118,"open_issues":60,"watchers":229,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/openshift/origin/pulls/646"},"html":{"href":"https://github.com/openshift/origin/pull/646"},"issue":{"href":"https://api.github.com/repos/openshift/origin/issues/646"},"comments":{"href":"https://api.github.com/repos/openshift/origin/issues/646/comments"},"review_comments":{"href":"https://api.github.com/repos/openshift/origin/pulls/646/comments"},"review_comment":{"href":"https://api.github.com/repos/openshift/origin/pulls/comments/{number}"},"commits":{"href":"https://api.github.com/repos/openshift/origin/pulls/646/commits"},"statuses":{"href":"https://api.github.com/repos/openshift/origin/statuses/d6bb9c24e1406fab109e5fc82c121930a89e9619"}}}}