KAFKA-20039: Fix Docker mount permission errors on SELinux-enabled systems #781
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
This PR fixes Docker mount permission errors on SELinux-enabled systems by appending the
:zsuffix to volume mounts.Makefile(build and serve targets).github/workflows/build-docker-image.ymlThe
:zflag instructs Docker to relabel the volume content with the correct SELinux context. On non-SELinux systems, this flag is ignored by Docker, ensuring backward compatibility.JIRA
https://issues.apache.org/jira/browse/KAFKA-20039
Testing & Verification
I have verified this change locally to ensure no regression on non-SELinux environments.
Environment:
Steps Performed:
make build: Verified that the static site generates successfully without errors.make serve: Verified that the local server starts at http://localhost:1313 without permission errors.Result:
The build passed and the site is accessible, confirming that the
:zflag is safely ignored on non-SELinux systems.Screenshots:
Reviewers: Ken Huang s7133700@gmail.com, Chia-Ping Tsai chia7712@gmail.com