Allow Project File Access with Podman+Selinux

With selinux enabled distros containers accessing KoboldAIs main directory as content, as planned here, will likely generally be denied (atleast with podman).
Option 1 would be to mark it with the right label - like :z - but that has other Implications for the content directory.

The other fix, if uglier, is to run the container without labels being enforced and thus allow the file access as the same user and with no further sideeffects to the project file labelling.
This commit is contained in:
waffshappen 2023-02-15 23:32:41 +00:00 committed by GitHub
parent cc01ad730a
commit d026bd79cb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions

View File

@ -5,6 +5,8 @@ services:
environment:
- DISPLAY=${DISPLAY}
network_mode: "host"
security_opt:
- label:disable
volumes:
- /tmp/.X11-unix:/tmp/.X11-unix
- /etc/protocols:/etc/protocols:ro