Skip to content

[BUG] Unable to access files when useDocker is true and SELinux is enabled #991

@bamapookie

Description

@bamapookie

🐛 Bug Report:

Describe the bug

The OCI container running the generator is unable to access the input files and output directory when they are in a home directory. The volume parameters are missing the :Z at the end of the parameter to enable access when SELinux is enabled. The build fails because the docker container cannot find the spec file, even though it is properly configured.

Steps to Reproduce

Steps to reproduce the behavior:

  1. Enable SELinux on your linux workstation
  2. Check out your project into your home directory.
  3. Don't override default SELinux tags on your work directory. Leave them marked as unconfined_u:object_r:user_home_t, or however they are marked by default in your home directory. (Hint: use ls -lZ to see the SELinux markings) The markings should NOT mention container`. This would imply that the whole directory was changed to use container-friendly marking.
  4. Attempt to generate code from an api json file.
  5. See error. The build should complain that the spec file was not found.

Expected behavior

Code should be generated successfully.

Operation System (please complete the following information):

  • OS: RHEL 9
  • Version 9.6

Package System (please complete the following information):

  • Node v22.12.0

Additional context

The volume mount parameters should have a :Z at the end of the mapping (-v "<source file>:/local/input-spec:Z"). All volume mappings need this parameter.

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions