{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/741","labels_url":"https://api.github.com/repos/openshift/origin/issues/741/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/741/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/741/events","html_url":"https://github.com/openshift/origin/issues/741","id":55464430,"number":741,"title":"SELinux problems with volumes when running as a Docker container","user":{"login":"jimmidyson","id":464659,"avatar_url":"https://avatars.githubusercontent.com/u/464659?v=3","gravatar_id":"","url":"https://api.github.com/users/jimmidyson","html_url":"https://github.com/jimmidyson","followers_url":"https://api.github.com/users/jimmidyson/followers","following_url":"https://api.github.com/users/jimmidyson/following{/other_user}","gists_url":"https://api.github.com/users/jimmidyson/gists{/gist_id}","starred_url":"https://api.github.com/users/jimmidyson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jimmidyson/subscriptions","organizations_url":"https://api.github.com/users/jimmidyson/orgs","repos_url":"https://api.github.com/users/jimmidyson/repos","events_url":"https://api.github.com/users/jimmidyson/events{/privacy}","received_events_url":"https://api.github.com/users/jimmidyson/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/openshift/origin/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/openshift/origin/milestones/1","labels_url":"https://api.github.com/repos/openshift/origin/milestones/1/labels","id":963838,"number":1,"title":"0.3.0 (beta1)","description":"","creator":{"login":"smarterclayton","id":1163175,"avatar_url":"https://avatars.githubusercontent.com/u/1163175?v=3","gravatar_id":"","url":"https://api.github.com/users/smarterclayton","html_url":"https://github.com/smarterclayton","followers_url":"https://api.github.com/users/smarterclayton/followers","following_url":"https://api.github.com/users/smarterclayton/following{/other_user}","gists_url":"https://api.github.com/users/smarterclayton/gists{/gist_id}","starred_url":"https://api.github.com/users/smarterclayton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/smarterclayton/subscriptions","organizations_url":"https://api.github.com/users/smarterclayton/orgs","repos_url":"https://api.github.com/users/smarterclayton/repos","events_url":"https://api.github.com/users/smarterclayton/events{/privacy}","received_events_url":"https://api.github.com/users/smarterclayton/received_events","type":"User","site_admin":false},"open_issues":5,"closed_issues":0,"state":"open","created_at":"2015-02-03T16:38:18Z","updated_at":"2015-02-03T18:44:02Z","due_on":"2015-02-10T05:00:00Z","closed_at":null},"comments":4,"created_at":"2015-01-26T10:01:43Z","updated_at":"2015-02-03T19:03:19Z","closed_at":null,"body":"Running OpenShift as a docker (1.4.1) container on fc21 with:\r\n\r\n````\r\ndocker run -d --name=openshift -v /var/run/docker.sock:/var/run/docker.sock --privileged --net=host openshift/origin:latest start\r\n````\r\n\r\nEven without mounting any volume, the container uses `/var/lib/openshift` on the host (not quite sure how it does that, but hey!) for managed volumes.\r\n\r\nSince the latest RPM upgrade (`docker-io-1.4.1-5`) anything using an kubernetes volume fails to start up unless I run on the host:\r\n\r\n````\r\nchcon -Rt svirt_sandbox_file_t /var/lib/openshift/openshift.local.volumes/\r\n````\r\n\r\nIs there another way to work around this?"},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/72712558","html_url":"https://github.com/openshift/origin/issues/741#issuecomment-72712558","issue_url":"https://api.github.com/repos/openshift/origin/issues/741","id":72712558,"user":{"login":"ncdc","id":354,"avatar_url":"https://avatars.githubusercontent.com/u/354?v=3","gravatar_id":"","url":"https://api.github.com/users/ncdc","html_url":"https://github.com/ncdc","followers_url":"https://api.github.com/users/ncdc/followers","following_url":"https://api.github.com/users/ncdc/following{/other_user}","gists_url":"https://api.github.com/users/ncdc/gists{/gist_id}","starred_url":"https://api.github.com/users/ncdc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ncdc/subscriptions","organizations_url":"https://api.github.com/users/ncdc/orgs","repos_url":"https://api.github.com/users/ncdc/repos","events_url":"https://api.github.com/users/ncdc/events{/privacy}","received_events_url":"https://api.github.com/users/ncdc/received_events","type":"User","site_admin":false},"created_at":"2015-02-03T19:03:19Z","updated_at":"2015-02-03T19:03:19Z","body":"FYI I did this for STI a long time back (back when we were calling chcon) to check if SELinux is enabled and if chcon is available: https://github.com/openshift/geard/blob/24fcfed2beb2686f284822b308ef91c9834cb620/sti/selinux.go"}}