scripts/container.sh: fix rootless Podman on systems with SELinux

We need to pass the `z` option with the volume mount so it gets labeled correctly and access is possible on SELinux-enabled systems. On systems without SELinux, the flag is a no-op. Fixes freifunk-gluon#3199 (cherry picked from commit 9ccd353) Signed-off-by: Tom Herbers <[email protected]>
herbetom · Mar 16, 2024 · aefb3bf · aefb3bf
1 parent db38f9a
commit aefb3bf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/scripts/container.sh b/scripts/container.sh
@@ -12,7 +12,7 @@ TAG="gluon:${BRANCH:-latest}"
 if [ "$(command -v podman)" ]
 then
 	podman build -t "${TAG}" contrib/docker
-	podman run -it --rm -u "$(id -u):$(id -g)" --userns=keep-id --volume="$(pwd):/gluon" "${TAG}"
+	podman run -it --rm -u "$(id -u):$(id -g)" --userns=keep-id --volume="$(pwd):/gluon:z" "${TAG}"
 elif [ "$(command -v docker)" ]
 then
 	docker build -t "${TAG}" contrib/docker