fix(updater): add :z flag to docker volumes for SELinux

2026-02-22 15:33:42 +01:00
parent 6bc11d4c5e
commit 525b056b91
6 changed files with 45 additions and 54 deletions
--- a/app/services/update_service.py
+++ b/app/services/update_service.py
@@ -301,8 +301,8 @@ def trigger_update(config: Any, db_path: str) -> dict:
    helper_cmd = [
        "docker", "run", "-d",
        "--name", "msp-updater",
-        "-v", "/var/run/docker.sock:/var/run/docker.sock",
-        "-v", f"{host_source_dir}:{host_source_dir}:ro",
+        "-v", "/var/run/docker.sock:/var/run/docker.sock:z",
+        "-v", f"{host_source_dir}:{host_source_dir}:ro,z",
        *env_flags,
        own_image,
        "sh", "-c",