Skip to content
This repository has been archived by the owner on Aug 29, 2018. It is now read-only.

selinux policy prevents using gear remotely #219

Open
jameskyle opened this issue Jun 27, 2014 · 0 comments
Open

selinux policy prevents using gear remotely #219

jameskyle opened this issue Jun 27, 2014 · 0 comments

Comments

@jameskyle
Copy link

When trying to use gear remotely, some operations such as list-units are blocked by selinux rules. For example, the global log shows:

Jun 26 16:58:36 dock1 gear[25480]: job START *linux.listContainers, IKO_uQ8MvDaup6IQGEppkw: &{ListContainersRequest:0xc21036e370 systemd:0xc2100cd9b0}
Jun 26 16:58:36 dock1 systemd[1]: SELinux policy denies access.
Jun 26 16:58:36 dock1 gear[25480]: list_units: Unable to list units from systemd: SELinux policy denies access.
Jun 26 16:58:36 dock1 gear[25480]: job END   IKO_uQ8MvDaup6IQGEppkw
Jun 26 16:58:36 dock1 gear[25480]: 2014/06/26 16:58:36 500 2.07ms GET /containers

And here's the gear log:

Jun 26 16:59:47 dock1 gear[25480]: 2014/06/26 16:59:47 500 2.34ms GET /containers
Jun 26 17:02:20 dock1 gear[25480]: job START *linux.listContainers, oBI5yNHnZ4pa8wLN2Zl6nA: &{ListContainersRequest:0xc21014d140 systemd:0xc2100cd9b0}
Jun 26 17:02:20 dock1 gear[25480]: list_units: Unable to list units from systemd: SELinux policy denies access.
Jun 26 17:02:20 dock1 gear[25480]: job END   oBI5yNHnZ4pa8wLN2Zl6nA
Jun 26 17:02:20 dock1 gear[25480]: 2014/06/26 17:02:20 500 2.72ms GET /containers
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant