{"push_id":704359237,"size":1,"distinct_size":1,"ref":"refs/heads/e2e-docker-selinux","head":"193589dd0c40b6688bc959fe9887e3d0b00c0051","before":"313336c17ca80b8c0a7652bc3b57adea35b97777","commits":[{"sha":"193589dd0c40b6688bc959fe9887e3d0b00c0051","author":{"email":"6fe6b8a05df7f9c8cc3eafd421a9b8433d86fa1d@redhat.com","name":"Andy Goldstein"},"message":"Fix volume dir label for e2e-docker\n\nhack/test-end-to-end-docker.sh bind mounts\n/var/lib/openshift/openshift.local.volumes from the host into the origin\ncontainer. This directory will likely be labeled with either\ndocker_var_lib_t or openshift_var_lib_t, neither of which allows a\ncontainer's process access to the files in a volume.\n\nThe intermediate solution is to chcon the volume dir on the host to\nsvirt_sandbox_file_t.\n\nLonger term, we could\n\n1. Update the selinux policy for volume dirs under /var/lib/openshift\n2. Modify\nhttps://github.com/openshift/origin/blob/master/pkg/cmd/server/kubernetes/node.go#L102-L121\nto always call chcon when the node starts, instead of only if the volume\ndir doesn't exist and is therefore newly created.\n\nThis commit also changes the file name format of container logs captured\nby the e2e tests. Instead of being container-$containerID.log, they are\nnow container-$podName-$containerName.log, such as\ncontainer-docker-registry-1-7sm9l-registry.log.","distinct":true,"url":"https://api.github.com/repos/ncdc/origin/commits/193589dd0c40b6688bc959fe9887e3d0b00c0051"}]}