From a8a59cacb440aacc150fad8a94d264d53a341baf Mon Sep 17 00:00:00 2001 From: Tomas Tomecek Date: Fri, 6 Oct 2017 14:28:27 +0200 Subject: [PATCH] disable SELinux labeling otherwise stap is not able to load kernel modules https://lists.projectatomic.io/projectatomic-archives/atomic-devel/2017-October/msg00034.html Signed-off-by: Tomas Tomecek --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index ee0a39e..59352fa 100644 --- a/Dockerfile +++ b/Dockerfile @@ -7,7 +7,7 @@ LABEL com.redhat.component="$NAME" \ version="$VERSION" \ release="$RELEASE.$DISTTAG" \ architecture="$ARCH" \ - run="docker run --cap-add SYS_MODULE -v /sys/kernel/debug:/sys/kernel/debug -v /usr/src/kernels:/usr/src/kernels -v /usr/lib/modules/:/usr/lib/modules/ -v /usr/lib/debug:/usr/lib/debug -t -i --name NAME IMAGE" \ + run="docker run --security-opt label:disable --cap-add SYS_MODULE -v /sys/kernel/debug:/sys/kernel/debug -v /usr/src/kernels:/usr/src/kernels -v /usr/lib/modules/:/usr/lib/modules/ -v /usr/lib/debug:/usr/lib/debug -t -i --name NAME IMAGE" \ summary="programmable system-wide instrumentation system" RUN dnf install -y systemtap-testsuite systemtap systemtap-client && \