When installing Docker from the Docker repositories I'll get the following warning:
See "Running transactions":
warning: "setsebool: SELinux is disabled"
I'm not familiar with SELinux. I think ClearOS does not use it. Anyone?
[root@vm1 ~]# yum --enablerepo=clearos-centos-extras install docker-ce docker-ce-cli containerd.io
Failed to set locale, defaulting to C
Loaded plugins: clearcenter-marketplace, fastestmirror
ClearCenter Marketplace: fetching repositories...
Loading mirror speeds from cached hostfile
* clearos: mirror1-amsterdam.clearos.com
* clearos-centos: download2.clearsdn.com
* clearos-centos-extras: download2.clearsdn.com
* clearos-centos-sclo-rh: download2.clearsdn.com
* clearos-centos-updates: download2.clearsdn.com
* clearos-centos-verified: mirror1-amsterdam.clearos.com
* clearos-contribs: mirror1-amsterdam.clearos.com
* clearos-epel-verified: mirror1-amsterdam.clearos.com
* clearos-fast-updates: download2.clearsdn.com
* clearos-infra: mirror1-amsterdam.clearos.com
* clearos-paid: mirror1-amsterdam.clearos.com
* clearos-verified: mirror1-amsterdam.clearos.com
* private-clearcenter-verified-updates: download3.clearsdn.com:80
clearos-centos-extras | 2.9 kB 00:00:00
docker-ce-stable | 3.5 kB 00:00:00
(1/3): docker-ce-stable/x86_64/updateinfo | 55 B 00:00:00
(2/3): docker-ce-stable/x86_64/primary_db | 41 kB 00:00:00
(3/3): clearos-centos-extras/x86_64/primary_db | 164 kB 00:00:00
Resolving Dependencies
--> Running transaction check
---> Package containerd.io.x86_64 0:1.2.13-3.1.el7 will be installed
--> Processing Dependency: container-selinux >= 2:2.74 for package: containerd.io-1.2.13-3.1.el7.x86_64
---> Package docker-ce.x86_64 3:19.03.8-3.el7 will be installed
--> Processing Dependency: libcgroup for package: 3:docker-ce-19.03.8-3.el7.x86_64
---> Package docker-ce-cli.x86_64 1:19.03.8-3.el7 will be installed
--> Running transaction check
---> Package container-selinux.noarch 2:2.107-3.el7 will be installed
--> Processing Dependency: policycoreutils-python for package: 2:container-selinux-2.107-3.el7.noarch
---> Package libcgroup.x86_64 0:0.41-21.el7 will be installed
--> Running transaction check
---> Package policycoreutils-python.x86_64 0:2.5-33.el7 will be installed
--> Processing Dependency: setools-libs >= 3.3.8-4 for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libsemanage-python >= 2.5-14 for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: audit-libs-python >= 2.1.3-4 for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: python-IPy for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libqpol.so.1(VERS_1.4)(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libqpol.so.1(VERS_1.2)(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libapol.so.4(VERS_4.0)(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: checkpolicy for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libqpol.so.1()(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libapol.so.4()(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Running transaction check
---> Package audit-libs-python.x86_64 0:2.8.5-4.el7 will be installed
---> Package checkpolicy.x86_64 0:2.5-8.el7 will be installed
---> Package libsemanage-python.x86_64 0:2.5-14.el7 will be installed
---> Package python-IPy.noarch 0:0.75-6.el7 will be installed
---> Package setools-libs.x86_64 0:3.3.8-4.el7 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
=================================================================================================================
Package Arch Version Repository Size
=================================================================================================================
Installing:
containerd.io x86_64 1.2.13-3.1.el7 docker-ce-stable 23 M
docker-ce x86_64 3:19.03.8-3.el7 docker-ce-stable 25 M
docker-ce-cli x86_64 1:19.03.8-3.el7 docker-ce-stable 40 M
Installing for dependencies:
audit-libs-python x86_64 2.8.5-4.el7 clearos-centos 76 k
checkpolicy x86_64 2.5-8.el7 clearos-centos 295 k
container-selinux noarch 2:2.107-3.el7 clearos-centos-extras 39 k
libcgroup x86_64 0.41-21.el7 clearos-centos 66 k
libsemanage-python x86_64 2.5-14.el7 clearos-centos 113 k
policycoreutils-python x86_64 2.5-33.el7 clearos-centos 457 k
python-IPy noarch 0.75-6.el7 clearos-centos 32 k
setools-libs x86_64 3.3.8-4.el7 clearos-centos 620 k
Transaction Summary
=================================================================================================================
Install 3 Packages (+8 Dependent packages)
Total download size: 89 M
Installed size: 369 M
Is this ok [y/d/N]: y
Downloading packages:
(1/11): container-selinux-2.107-3.el7.noarch.rpm | 39 kB 00:00:00
(2/11): audit-libs-python-2.8.5-4.el7.x86_64.rpm | 76 kB 00:00:00
(3/11): checkpolicy-2.5-8.el7.x86_64.rpm | 295 kB 00:00:00
warning: /var/cache/yum/x86_64/7/docker-ce-stable/packages/docker-ce-19.03.8-3.el7.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID 621e9f35: NOKEY
Public key for docker-ce-19.03.8-3.el7.x86_64.rpm is not installed
(4/11): docker-ce-19.03.8-3.el7.x86_64.rpm | 25 MB 00:00:01
(5/11): containerd.io-1.2.13-3.1.el7.x86_64.rpm | 23 MB 00:00:01
(6/11): libcgroup-0.41-21.el7.x86_64.rpm | 66 kB 00:00:00
(7/11): libsemanage-python-2.5-14.el7.x86_64.rpm | 113 kB 00:00:00
(8/11): setools-libs-3.3.8-4.el7.x86_64.rpm | 620 kB 00:00:00
(9/11): python-IPy-0.75-6.el7.noarch.rpm | 32 kB 00:00:00
(10/11): docker-ce-cli-19.03.8-3.el7.x86_64.rpm | 40 MB 00:00:01
(11/11): policycoreutils-python-2.5-33.el7.x86_64.rpm | 457 kB 00:00:02
-----------------------------------------------------------------------------------------------------------------
Total 24 MB/s | 89 MB 00:00:03
Retrieving key from https://download.docker.com/linux/centos/gpg
Importing GPG key 0x621E9F35:
Userid : "Docker Release (CE rpm) <[email protected]>"
Fingerprint: 060a 61c5 1b55 8a7f 742b 77aa c52f eb6b 621e 9f35
From : https://download.docker.com/linux/centos/gpg
Is this ok [y/N]: y
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : libcgroup-0.41-21.el7.x86_64 1/11
Installing : setools-libs-3.3.8-4.el7.x86_64 2/11
Installing : audit-libs-python-2.8.5-4.el7.x86_64 3/11
Installing : python-IPy-0.75-6.el7.noarch 4/11
Installing : 1:docker-ce-cli-19.03.8-3.el7.x86_64 5/11
Installing : libsemanage-python-2.5-14.el7.x86_64 6/11
Installing : checkpolicy-2.5-8.el7.x86_64 7/11
Installing : policycoreutils-python-2.5-33.el7.x86_64 8/11
Installing : 2:container-selinux-2.107-3.el7.noarch 9/11
setsebool: SELinux is disabled.
Installing : containerd.io-1.2.13-3.1.el7.x86_64 10/11
Installing : 3:docker-ce-19.03.8-3.el7.x86_64 11/11
Verifying : checkpolicy-2.5-8.el7.x86_64 1/11
Verifying : policycoreutils-python-2.5-33.el7.x86_64 2/11
Verifying : libsemanage-python-2.5-14.el7.x86_64 3/11
Verifying : 1:docker-ce-cli-19.03.8-3.el7.x86_64 4/11
Verifying : 2:container-selinux-2.107-3.el7.noarch 5/11
Verifying : python-IPy-0.75-6.el7.noarch 6/11
Verifying : containerd.io-1.2.13-3.1.el7.x86_64 7/11
Verifying : 3:docker-ce-19.03.8-3.el7.x86_64 8/11
Verifying : audit-libs-python-2.8.5-4.el7.x86_64 9/11
Verifying : setools-libs-3.3.8-4.el7.x86_64 10/11
Verifying : libcgroup-0.41-21.el7.x86_64 11/11
Installed:
containerd.io.x86_64 0:1.2.13-3.1.el7 docker-ce.x86_64 3:19.03.8-3.el7 docker-ce-cli.x86_64 1:19.03.8-3.el7
Dependency Installed:
audit-libs-python.x86_64 0:2.8.5-4.el7 checkpolicy.x86_64 0:2.5-8.el7
container-selinux.noarch 2:2.107-3.el7 libcgroup.x86_64 0:0.41-21.el7
libsemanage-python.x86_64 0:2.5-14.el7 policycoreutils-python.x86_64 0:2.5-33.el7
python-IPy.noarch 0:0.75-6.el7 setools-libs.x86_64 0:3.3.8-4.el7
Complete!
See "Running transactions":
warning: "setsebool: SELinux is disabled"
I'm not familiar with SELinux. I think ClearOS does not use it. Anyone?
In Water Cooler
Share this post:
Responses (3)
-
Accepted Answer
Funny, I also see this warning when I install Docker from the CleaOS repositories!
[root@vm1 ~]# yum install docker
Failed to set locale, defaulting to C
Loaded plugins: clearcenter-marketplace, fastestmirror
ClearCenter Marketplace: fetching repositories...
Loading mirror speeds from cached hostfile
* clearos: mirror1-amsterdam.clearos.com
* clearos-centos: download1.clearsdn.com
* clearos-centos-sclo-rh: download1.clearsdn.com
* clearos-centos-updates: download1.clearsdn.com
* clearos-centos-verified: mirror1-amsterdam.clearos.com
* clearos-contribs: mirror1-amsterdam.clearos.com
* clearos-epel-verified: mirror1-amsterdam.clearos.com
* clearos-fast-updates: download1.clearsdn.com
* clearos-infra: mirror1-amsterdam.clearos.com
* clearos-paid: mirror1-amsterdam.clearos.com
* clearos-verified: mirror1-amsterdam.clearos.com
* private-clearcenter-verified-updates: download1.clearsdn.com:80
Resolving Dependencies
--> Running transaction check
---> Package docker.x86_64 2:1.13.1-53.git774336d.el7.centos will be installed
--> Processing Dependency: docker-client = 2:1.13.1-53.git774336d.el7.centos for package: 2:docker-1.13.1-53.git774336d.el7.centos.x86_64
--> Processing Dependency: docker-common = 2:1.13.1-53.git774336d.el7.centos for package: 2:docker-1.13.1-53.git774336d.el7.centos.x86_64
--> Running transaction check
---> Package docker-client.x86_64 2:1.13.1-53.git774336d.el7.centos will be installed
---> Package docker-common.x86_64 2:1.13.1-53.git774336d.el7.centos will be installed
--> Processing Dependency: container-selinux >= 2:2.21-2 for package: 2:docker-common-1.13.1-53.git774336d.el7.centos.x86_64
--> Processing Dependency: container-storage-setup >= 0.7.0-1 for package: 2:docker-common-1.13.1-53.git774336d.el7.centos.x86_64
--> Processing Dependency: oci-register-machine >= 1:0-5.13 for package: 2:docker-common-1.13.1-53.git774336d.el7.centos.x86_64
--> Processing Dependency: oci-systemd-hook >= 1:0.1.4-9 for package: 2:docker-common-1.13.1-53.git774336d.el7.centos.x86_64
--> Processing Dependency: oci-umount >= 2:2.0.0-1 for package: 2:docker-common-1.13.1-53.git774336d.el7.centos.x86_64
--> Processing Dependency: skopeo-containers >= 1:0.1.26-2 for package: 2:docker-common-1.13.1-53.git774336d.el7.centos.x86_64
--> Running transaction check
---> Package container-selinux.noarch 2:2.42-1.gitad8f0f7.el7 will be installed
--> Processing Dependency: policycoreutils-python for package: 2:container-selinux-2.42-1.gitad8f0f7.el7.noarch
---> Package container-storage-setup.noarch 0:0.8.0-3.git1d27ecf.el7 will be installed
---> Package oci-register-machine.x86_64 1:0-6.git2b44233.el7 will be installed
---> Package oci-systemd-hook.x86_64 1:0.1.14-2.git9b1e622.el7 will be installed
--> Processing Dependency: libyajl.so.2()(64bit) for package: 1ci-systemd-hook-0.1.14-2.git9b1e622.el7.x86_64
---> Package oci-umount.x86_64 2:2.3.1-2.gitbf16163.el7 will be installed
---> Package skopeo-containers.x86_64 1:0.1.28-1.git0270e56.el7 will be installed
--> Running transaction check
---> Package policycoreutils-python.x86_64 0:2.5-33.el7 will be installed
--> Processing Dependency: setools-libs >= 3.3.8-4 for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libsemanage-python >= 2.5-14 for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: audit-libs-python >= 2.1.3-4 for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: python-IPy for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libqpol.so.1(VERS_1.4)(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libqpol.so.1(VERS_1.2)(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libcgroup for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libapol.so.4(VERS_4.0)(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: checkpolicy for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libqpol.so.1()(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libapol.so.4()(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
---> Package yajl.x86_64 0:2.0.4-4.el7 will be installed
--> Running transaction check
---> Package audit-libs-python.x86_64 0:2.8.5-4.el7 will be installed
---> Package checkpolicy.x86_64 0:2.5-8.el7 will be installed
---> Package libcgroup.x86_64 0:0.41-21.el7 will be installed
---> Package libsemanage-python.x86_64 0:2.5-14.el7 will be installed
---> Package python-IPy.noarch 0:0.75-6.el7 will be installed
---> Package setools-libs.x86_64 0:3.3.8-4.el7 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
=================================================================================================================
Package Arch Version Repository Size
=================================================================================================================
Installing:
docker x86_64 2:1.13.1-53.git774336d.el7.centos private-clearcenter-verified-updates 16 M
Installing for dependencies:
audit-libs-python x86_64 2.8.5-4.el7 clearos-centos 76 k
checkpolicy x86_64 2.5-8.el7 clearos-centos 295 k
container-selinux noarch 2:2.42-1.gitad8f0f7.el7 private-clearcenter-verified-updates 32 k
container-storage-setup noarch 0.8.0-3.git1d27ecf.el7 private-clearcenter-verified-updates 33 k
docker-client x86_64 2:1.13.1-53.git774336d.el7.centos private-clearcenter-verified-updates 3.7 M
docker-common x86_64 2:1.13.1-53.git774336d.el7.centos private-clearcenter-verified-updates 86 k
libcgroup x86_64 0.41-21.el7 clearos-centos 66 k
libsemanage-python x86_64 2.5-14.el7 clearos-centos 113 k
oci-register-machine x86_64 1:0-6.git2b44233.el7 private-clearcenter-verified-updates 1.1 M
oci-systemd-hook x86_64 1:0.1.14-2.git9b1e622.el7 private-clearcenter-verified-updates 32 k
oci-umount x86_64 2:2.3.1-2.gitbf16163.el7 private-clearcenter-verified-updates 30 k
policycoreutils-python x86_64 2.5-33.el7 clearos-centos 457 k
python-IPy noarch 0.75-6.el7 clearos-centos 32 k
setools-libs x86_64 3.3.8-4.el7 clearos-centos 620 k
skopeo-containers x86_64 1:0.1.28-1.git0270e56.el7 private-clearcenter-verified-updates 13 k
yajl x86_64 2.0.4-4.el7 clearos-centos 39 k
Transaction Summary
=================================================================================================================
Install 1 Package (+16 Dependent packages)
Total download size: 23 M
Installed size: 77 M
Is this ok [y/d/N]: y
Downloading packages:
(3/17): container-selinux-2.42-1.gitad8f0f7.el7.noarch.rpm | 32 kB 00:00:00
(4/17): container-storage-setup-0.8.0-3.git1d27ecf.el7.noarch.rpm | 33 kB 00:00:00
(5/17): docker-1.13.1-53.git774336d.el7.centos.x86_64.rpm | 16 MB 00:00:03
(6/17): docker-client-1.13.1-53.git774336d.el7.centos.x86_64.rpm | 3.7 MB 00:00:00
(7/17): docker-common-1.13.1-53.git774336d.el7.centos.x86_64.rpm | 86 kB 00:00:00
(10/17): oci-register-machine-0-6.git2b44233.el7.x86_64.rpm | 1.1 MB 00:00:00
(11/17): oci-systemd-hook-0.1.14-2.git9b1e622.el7.x86_64.rpm | 32 kB 00:00:00
(12/17): oci-umount-2.3.1-2.gitbf16163.el7.x86_64.rpm | 30 kB 00:00:00
(16/17): skopeo-containers-0.1.28-1.git0270e56.el7.x86_64.rpm | 13 kB 00:00:00
(1/8): audit-libs-python-2.8.5-4.el7.x86_64.rpm | 76 kB 00:00:00
(2/8): libcgroup-0.41-21.el7.x86_64.rpm | 66 kB 00:00:00
(3/8): python-IPy-0.75-6.el7.noarch.rpm | 32 kB 00:00:00
(4/8): checkpolicy-2.5-8.el7.x86_64.rpm | 295 kB 00:00:00
(5/8): policycoreutils-python-2.5-33.el7.x86_64.rpm | 457 kB 00:00:00
(6/8): libsemanage-python-2.5-14.el7.x86_64.rpm | 113 kB 00:00:00
(7/8): yajl-2.0.4-4.el7.x86_64.rpm | 39 kB 00:00:00
(8/8): setools-libs-3.3.8-4.el7.x86_64.rpm | 620 kB 00:00:00
-----------------------------------------------------------------------------------------------------------------
Total 3.4 MB/s | 23 MB 00:00:06
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : yajl-2.0.4-4.el7.x86_64 1/17
Installing : 2ci-umount-2.3.1-2.gitbf16163.el7.x86_64 2/17
Installing : 1ci-systemd-hook-0.1.14-2.git9b1e622.el7.x86_64 3/17
Installing : setools-libs-3.3.8-4.el7.x86_64 4/17
Installing : container-storage-setup-0.8.0-3.git1d27ecf.el7.noarch 5/17
Installing : audit-libs-python-2.8.5-4.el7.x86_64 6/17
Installing : 1:skopeo-containers-0.1.28-1.git0270e56.el7.x86_64 7/17
Installing : checkpolicy-2.5-8.el7.x86_64 8/17
Installing : python-IPy-0.75-6.el7.noarch 9/17
Installing : 1ci-register-machine-0-6.git2b44233.el7.x86_64 10/17
Installing : libcgroup-0.41-21.el7.x86_64 11/17
Installing : libsemanage-python-2.5-14.el7.x86_64 12/17
Installing : policycoreutils-python-2.5-33.el7.x86_64 13/17
Installing : 2:container-selinux-2.42-1.gitad8f0f7.el7.noarch 14/17
setsebool: SELinux is disabled.
Installing : 2:docker-common-1.13.1-53.git774336d.el7.centos.x86_64 15/17
Installing : 2:docker-client-1.13.1-53.git774336d.el7.centos.x86_64 16/17
Installing : 2:docker-1.13.1-53.git774336d.el7.centos.x86_64 17/17
Verifying : 2:container-selinux-2.42-1.gitad8f0f7.el7.noarch 1/17
Verifying : libsemanage-python-2.5-14.el7.x86_64 2/17
Verifying : policycoreutils-python-2.5-33.el7.x86_64 3/17
Verifying : libcgroup-0.41-21.el7.x86_64 4/17
Verifying : 2ci-umount-2.3.1-2.gitbf16163.el7.x86_64 5/17
Verifying : 1ci-register-machine-0-6.git2b44233.el7.x86_64 6/17
Verifying : python-IPy-0.75-6.el7.noarch 7/17
Verifying : 2:docker-common-1.13.1-53.git774336d.el7.centos.x86_64 8/17
Verifying : 2:docker-1.13.1-53.git774336d.el7.centos.x86_64 9/17
Verifying : checkpolicy-2.5-8.el7.x86_64 10/17
Verifying : 1:skopeo-containers-0.1.28-1.git0270e56.el7.x86_64 11/17
Verifying : yajl-2.0.4-4.el7.x86_64 12/17
Verifying : audit-libs-python-2.8.5-4.el7.x86_64 13/17
Verifying : container-storage-setup-0.8.0-3.git1d27ecf.el7.noarch 14/17
Verifying : 2:docker-client-1.13.1-53.git774336d.el7.centos.x86_64 15/17
Verifying : 1ci-systemd-hook-0.1.14-2.git9b1e622.el7.x86_64 16/17
Verifying : setools-libs-3.3.8-4.el7.x86_64 17/17
Installed:
docker.x86_64 2:1.13.1-53.git774336d.el7.centos
Dependency Installed:
audit-libs-python.x86_64 0:2.8.5-4.el7 checkpolicy.x86_64 0:2.5-8.el7
container-selinux.noarch 2:2.42-1.gitad8f0f7.el7 container-storage-setup.noarch 0:0.8.0-3.git1d27ecf.el7
docker-client.x86_64 2:1.13.1-53.git774336d.el7.centos docker-common.x86_64 2:1.13.1-53.git774336d.el7.centos
libcgroup.x86_64 0:0.41-21.el7 libsemanage-python.x86_64 0:2.5-14.el7
oci-register-machine.x86_64 1:0-6.git2b44233.el7 oci-systemd-hook.x86_64 1:0.1.14-2.git9b1e622.el7
oci-umount.x86_64 2:2.3.1-2.gitbf16163.el7 policycoreutils-python.x86_64 0:2.5-33.el7
python-IPy.noarch 0:0.75-6.el7 setools-libs.x86_64 0:3.3.8-4.el7
skopeo-containers.x86_64 1:0.1.28-1.git0270e56.el7 yajl.x86_64 0:2.0.4-4.el7
Complete!
-
Accepted Answer
-
Accepted Answer
I noticed myself just the other day that ClearOS had SELlinux disabled. Everywhere you read discussions about SELinux you are always told to "never disable SELinux" because of the security it provides. ClearOS is suppsedly designed to be secure, so can somebody from Clear explain why SELinux being disabled is ok? Is there a plan to make the appropriate changes so that SELinux can be enabled?
Please login to post a reply
You will need to be logged in to be able to post a reply. Login using the form on the right or register an account if you are new here.
Register Here »