From c13434d95bbcbd64e3fad502d3785c63c666dc7f Mon Sep 17 00:00:00 2001 From: Tommy Date: Mon, 11 Apr 2022 19:12:55 -0400 Subject: [PATCH] Update Docker-Compose.yml --- Docker-Compose.yml | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/Docker-Compose.yml b/Docker-Compose.yml index 41a981a..42ddd26 100644 --- a/Docker-Compose.yml +++ b/Docker-Compose.yml @@ -29,13 +29,21 @@ systemd: RemainAfterExit=yes ExecStart=/usr/bin/rpm-ostree install docker-compose fail2ban firewalld prelockd tuned qemu-guest-agent ExecStart=/bin/touch /var/lib/%N.stamp - ExecStart=/usr/sbin/setsebool -P container_use_cephfs off - ExecStart=/usr/sbin/setsebool -P virt_use_nfs off - ExecStart=/usr/sbin/setsebool -P virt_use_samba off ExecStart=/usr/bin/sed 's/nullok//g' /etc/pam.d/system-auth ExecStart=/usr/bin/curl https://raw.githubusercontent.com/Whonix/security-misc/master/etc/modprobe.d/30_security-misc.conf -o /etc/modprobe.d/30_security-misc.conf ExecStart=/bin/systemctl --no-block reboot + [Install] + WantedBy=multi-user.target + - name: setsebool.service + enabled: true + contents: | + [Service] + Type=oneshot + ExecStart=/usr/sbin/setsebool container_use_cephfs off + ExecStart=/usr/sbin/setsebool virt_use_nfs off + ExecStart=/usr/sbin/setsebool virt_use_samba off + RemainAfterExit=yes [Install] WantedBy=multi-user.target - name: docker.service