docker: Add SELinux labels for rootless Podman compatibility

Volumes need to be properly re-labelled on rootless Podman
setups on Fedora.

The SELinux re-labeling bind mount option is ignored on platforms
without SELinux, so it shouldn't break existing setups.
This commit is contained in:
Priit Laes 2023-10-11 13:42:33 +03:00
parent 24ce6fa78e
commit 355a8ef9a1

View File

@ -6,8 +6,8 @@ services:
command: -c /etc/chirpstack command: -c /etc/chirpstack
restart: unless-stopped restart: unless-stopped
volumes: volumes:
- ./configuration/chirpstack:/etc/chirpstack - ./configuration/chirpstack:/etc/chirpstack:z
- ./lorawan-devices:/opt/lorawan-devices - ./lorawan-devices:/opt/lorawan-devices:z
depends_on: depends_on:
- postgres - postgres
- mosquitto - mosquitto
@ -25,7 +25,7 @@ services:
ports: ports:
- 1700:1700/udp - 1700:1700/udp
volumes: volumes:
- ./configuration/chirpstack-gateway-bridge:/etc/chirpstack-gateway-bridge - ./configuration/chirpstack-gateway-bridge:/etc/chirpstack-gateway-bridge:z
environment: environment:
- INTEGRATION__MQTT__EVENT_TOPIC_TEMPLATE=eu868/gateway/{{ .GatewayID }}/event/{{ .EventType }} - INTEGRATION__MQTT__EVENT_TOPIC_TEMPLATE=eu868/gateway/{{ .GatewayID }}/event/{{ .EventType }}
- INTEGRATION__MQTT__STATE_TOPIC_TEMPLATE=eu868/gateway/{{ .GatewayID }}/state/{{ .StateType }} - INTEGRATION__MQTT__STATE_TOPIC_TEMPLATE=eu868/gateway/{{ .GatewayID }}/state/{{ .StateType }}
@ -40,7 +40,7 @@ services:
ports: ports:
- 3001:3001 - 3001:3001
volumes: volumes:
- ./configuration/chirpstack-gateway-bridge:/etc/chirpstack-gateway-bridge - ./configuration/chirpstack-gateway-bridge:/etc/chirpstack-gateway-bridge:z
depends_on: depends_on:
- mosquitto - mosquitto
@ -57,8 +57,8 @@ services:
image: postgres:14-alpine image: postgres:14-alpine
restart: unless-stopped restart: unless-stopped
volumes: volumes:
- ./configuration/postgresql/initdb:/docker-entrypoint-initdb.d - ./configuration/postgresql/initdb:/docker-entrypoint-initdb.d:Z
- postgresqldata:/var/lib/postgresql/data - postgresqldata:/var/lib/postgresql/data:Z
environment: environment:
- POSTGRES_PASSWORD=root - POSTGRES_PASSWORD=root
@ -66,7 +66,7 @@ services:
image: redis:7-alpine image: redis:7-alpine
restart: unless-stopped restart: unless-stopped
volumes: volumes:
- redisdata:/data - redisdata:/data:z
mosquitto: mosquitto:
image: eclipse-mosquitto:2 image: eclipse-mosquitto:2
@ -74,7 +74,7 @@ services:
ports: ports:
- 1883:1883 - 1883:1883
volumes: volumes:
- ./configuration/mosquitto/config/:/mosquitto/config/ - ./configuration/mosquitto/config/:/mosquitto/config/:Z
volumes: volumes:
postgresqldata: postgresqldata: