phoenix-oss/llama-stack-mirror
0
0
Fork 1
mirror of https://github.com/meta-llama/llama-stack.git synced 2025-07-29 15:23:51 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

docker: Check for selinux before using --security-opt

Browse source 
Before using `--security-opt label=disable`, check that SELinux is
enabled. Otherwise, the option is not relevant.

This fixes errors on Mac.

Closes #166

Signed-off-by: Russell Bryant <rbryant@redhat.com>
This commit is contained in:
Russell Bryant 2024-10-01 13:17:09 +00:00
parent eb2d8a31a5
commit f9e2e34370
3 changed files with 12 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
llama_stack/distribution/build_container.sh
View file

@ -125,8 +125,10 @@ if [ -n "$LLAMA_MODELS_DIR" ]; then
mounts="$mounts -v $(readlink -f $LLAMA_MODELS_DIR):$models_mount" mounts="$mounts -v $(readlink -f $LLAMA_MODELS_DIR):$models_mount"
fi fi
if command -v selinuxenabled &> /dev/null && selinuxenabled; then
# Disable SELinux labels -- we don't want to relabel the llama-stack source dir # Disable SELinux labels -- we don't want to relabel the llama-stack source dir
DOCKER_OPTS="$DOCKER_OPTS --security-opt label=disable" DOCKER_OPTS="$DOCKER_OPTS --security-opt label=disable"
fi
set -x set -x
$DOCKER_BINARY build $DOCKER_OPTS -t $image_name -f "$TEMP_DIR/Dockerfile" "$REPO_DIR" $mounts $DOCKER_BINARY build $DOCKER_OPTS -t $image_name -f "$TEMP_DIR/Dockerfile" "$REPO_DIR" $mounts

2
llama_stack/distribution/configure_container.sh
View file

@ -28,8 +28,10 @@ docker_image="$1"
host_build_dir="$2" host_build_dir="$2"
container_build_dir="/app/builds" container_build_dir="/app/builds"
if command -v selinuxenabled &> /dev/null && selinuxenabled; then
# Disable SELinux labels # Disable SELinux labels
DOCKER_OPTS="$DOCKER_OPTS --security-opt label=disable" DOCKER_OPTS="$DOCKER_OPTS --security-opt label=disable"
fi
mounts="" mounts=""
if [ -n "$LLAMA_STACK_DIR" ]; then if [ -n "$LLAMA_STACK_DIR" ]; then

2
llama_stack/distribution/start_container.sh
View file

@ -40,8 +40,10 @@ shift
set -x set -x
if command -v selinuxenabled &> /dev/null && selinuxenabled; then
# Disable SELinux labels # Disable SELinux labels
DOCKER_OPTS="$DOCKER_OPTS --security-opt label=disable" DOCKER_OPTS="$DOCKER_OPTS --security-opt label=disable"
fi
mounts="" mounts=""
if [ -n "$LLAMA_STACK_DIR" ]; then if [ -n "$LLAMA_STACK_DIR" ]; then