)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":20498,"name":"Spyros Trigazis","email":"spyridon.trigazis@cern.ch","username":"strigazi"},"change_message_id":"307a216eb3c70f3a860a23ccce0dd4e6295f6bbe","unresolved":false,"context_lines":[{"line_number":9,"context_line":"Fedora Atomic default: permissive"},{"line_number":10,"context_line":"Fedora CoreOS default: enforcing"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"This label may need setting to permissive in Fedora CoreOS in order to"},{"line_number":13,"context_line":"make use of in-tree/out-of-tree Cinder persistent volumes. For details,"},{"line_number":14,"context_line":"see https://storyboard.openstack.org/#!/story/2007413."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Story: 2007413"},{"line_number":17,"context_line":"Task: 39033"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":6,"id":"df33271e_f48add18","line":14,"range":{"start_line":12,"start_character":0,"end_line":14,"end_character":54},"updated":"2020-03-27 10:34:08.000000000","message":"Not required any more","commit_id":"297c978a088463c9b393935b7c4fa3aa8eb04c21"}],"doc/source/user/index.rst":[{"author":{"_account_id":20498,"name":"Spyros Trigazis","email":"spyridon.trigazis@cern.ch","username":"strigazi"},"change_message_id":"5e21953a4772c8d2230929e26d99f3a73acb6a22","unresolved":false,"context_lines":[{"line_number":449,"context_line":"|                                       | - false            |               |"},{"line_number":450,"context_line":"+---------------------------------------+--------------------+---------------+"},{"line_number":451,"context_line":"| `selinux_mode`_                       | - enforcing        | see below     |"},{"line_number":452,"context_line":"|                                       | - permissive       |               |"},{"line_number":453,"context_line":"+---------------------------------------+--------------------+---------------+"},{"line_number":454,"context_line":"| `container_runtime`_                  | - \"\"               | \"\"            |"},{"line_number":455,"context_line":"|                                       | - containerd       |               |"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1fa4df85_2c3de5dc","line":452,"updated":"2020-03-17 08:11:03.000000000","message":"- disabled\n- enforcing\n- permissive\n\nhttp://man7.org/linux/man-pages/man5/selinux_config.5.html","commit_id":"a2893784fa4e5c835a601501fad48230a0af337d"}],"magnum/drivers/heat/driver.py":[{"author":{"_account_id":20498,"name":"Spyros Trigazis","email":"spyridon.trigazis@cern.ch","username":"strigazi"},"change_message_id":"5e21953a4772c8d2230929e26d99f3a73acb6a22","unresolved":false,"context_lines":[{"line_number":585,"context_line":"            reasons \u003d [\"%s failed\" % (ns.name)"},{"line_number":586,"context_line":"                       for ns in ng_statuses"},{"line_number":587,"context_line":"                       if ns.status.endswith(FAILED)]"},{"line_number":588,"context_line":"            self.cluster.status_reason \u003d \u0027, \u0027.join(reasons)"},{"line_number":589,"context_line":""},{"line_number":590,"context_line":"        self.cluster.save()"},{"line_number":591,"context_line":""}],"source_content_type":"text/x-python","patch_set":2,"id":"1fa4df85_4c62a118","line":588,"range":{"start_line":588,"start_character":41,"end_line":588,"end_character":45},"updated":"2020-03-17 08:11:03.000000000","message":"ack","commit_id":"a2893784fa4e5c835a601501fad48230a0af337d"},{"author":{"_account_id":28022,"name":"Bharat Kunwar","email":"brtknr@bath.edu","username":"brtknr"},"change_message_id":"71eafc35a4d0af674f97fe7e649a5b937b935ec7","unresolved":false,"context_lines":[{"line_number":585,"context_line":"            reasons \u003d [\"%s failed\" % (ns.name)"},{"line_number":586,"context_line":"                       for ns in ng_statuses"},{"line_number":587,"context_line":"                       if ns.status.endswith(FAILED)]"},{"line_number":588,"context_line":"            self.cluster.status_reason \u003d \u0027, \u0027.join(reasons)"},{"line_number":589,"context_line":""},{"line_number":590,"context_line":"        self.cluster.save()"},{"line_number":591,"context_line":""}],"source_content_type":"text/x-python","patch_set":2,"id":"1fa4df85_c6d98d22","line":588,"range":{"start_line":588,"start_character":41,"end_line":588,"end_character":45},"in_reply_to":"1fa4df85_4c62a118","updated":"2020-03-17 10:59:54.000000000","message":"woops, this has been bugging me but should be a different patch.","commit_id":"a2893784fa4e5c835a601501fad48230a0af337d"}],"magnum/drivers/k8s_fedora_atomic_v1/templates/kubecluster.yaml":[{"author":{"_account_id":20498,"name":"Spyros Trigazis","email":"spyridon.trigazis@cern.ch","username":"strigazi"},"change_message_id":"5e21953a4772c8d2230929e26d99f3a73acb6a22","unresolved":false,"context_lines":[{"line_number":857,"context_line":"      Choose SELinux mode"},{"line_number":858,"context_line":"    default: \u0027permissive\u0027"},{"line_number":859,"context_line":"    constraints:"},{"line_number":860,"context_line":"      - allowed_values: [\"enforcing\", \"permissive\"]"},{"line_number":861,"context_line":""},{"line_number":862,"context_line":"  kube_image_digest:"},{"line_number":863,"context_line":"    type: string"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"1fa4df85_2cbac56d","line":860,"range":{"start_line":860,"start_character":24,"end_line":860,"end_character":51},"updated":"2020-03-17 08:11:03.000000000","message":"[\"disabled\", \"enforcing\", \"permissive\"]\n\nhttp://man7.org/linux/man-pages/man5/selinux_config.5.html","commit_id":"a2893784fa4e5c835a601501fad48230a0af337d"}],"magnum/drivers/k8s_fedora_coreos_v1/templates/fcct-config.yaml":[{"author":{"_account_id":20498,"name":"Spyros Trigazis","email":"spyridon.trigazis@cern.ch","username":"strigazi"},"change_message_id":"5e21953a4772c8d2230929e26d99f3a73acb6a22","unresolved":false,"context_lines":[{"line_number":83,"context_line":"          set -e"},{"line_number":84,"context_line":"          set +u"},{"line_number":85,"context_line":"          "},{"line_number":86,"context_line":"          setenforce __SELINUX_MODE__"},{"line_number":87,"context_line":"          sed -i \u0027"},{"line_number":88,"context_line":"              /^SELINUX\u003d/ s/\u003d.*/\u003d__SELINUX_MODE__/"},{"line_number":89,"context_line":"          \u0027 /etc/selinux/config"},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"          until [ -f /etc/pki/ca-trust/source/anchors/openstack-ca.pem ]"},{"line_number":92,"context_line":"          do"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"1fa4df85_4c194186","line":89,"range":{"start_line":86,"start_character":10,"end_line":89,"end_character":31},"updated":"2020-03-17 08:11:03.000000000","message":"We could add this as a file with overwrite: true. Not sure if there is a benefit for it though. So let\u0027s leave it like this. I mention it in case you want to investigate.","commit_id":"a2893784fa4e5c835a601501fad48230a0af337d"},{"author":{"_account_id":20498,"name":"Spyros Trigazis","email":"spyridon.trigazis@cern.ch","username":"strigazi"},"change_message_id":"b65855642c1512d92f8c529450d4fa5467c124c9","unresolved":false,"context_lines":[{"line_number":83,"context_line":"          set -e"},{"line_number":84,"context_line":"          set +u"},{"line_number":85,"context_line":"          "},{"line_number":86,"context_line":"          setenforce __SELINUX_MODE__"},{"line_number":87,"context_line":"          sed -i \u0027"},{"line_number":88,"context_line":"              /^SELINUX\u003d/ s/\u003d.*/\u003d__SELINUX_MODE__/"},{"line_number":89,"context_line":"          \u0027 /etc/selinux/config"},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"          until [ -f /etc/pki/ca-trust/source/anchors/openstack-ca.pem ]"},{"line_number":92,"context_line":"          do"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"1fa4df85_c92d1ea9","line":89,"range":{"start_line":86,"start_character":10,"end_line":89,"end_character":31},"in_reply_to":"1fa4df85_06d005f7","updated":"2020-03-17 12:28:53.000000000","message":"not sure if there is an advantage. This is fine as well since we do the same thing for atomic.\n\nFor completion, ignition writes files before the system boots. So we should need to run setenforce.","commit_id":"a2893784fa4e5c835a601501fad48230a0af337d"},{"author":{"_account_id":28022,"name":"Bharat Kunwar","email":"brtknr@bath.edu","username":"brtknr"},"change_message_id":"71eafc35a4d0af674f97fe7e649a5b937b935ec7","unresolved":false,"context_lines":[{"line_number":83,"context_line":"          set -e"},{"line_number":84,"context_line":"          set +u"},{"line_number":85,"context_line":"          "},{"line_number":86,"context_line":"          setenforce __SELINUX_MODE__"},{"line_number":87,"context_line":"          sed -i \u0027"},{"line_number":88,"context_line":"              /^SELINUX\u003d/ s/\u003d.*/\u003d__SELINUX_MODE__/"},{"line_number":89,"context_line":"          \u0027 /etc/selinux/config"},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"          until [ -f /etc/pki/ca-trust/source/anchors/openstack-ca.pem ]"},{"line_number":92,"context_line":"          do"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"1fa4df85_06d005f7","line":89,"range":{"start_line":86,"start_character":10,"end_line":89,"end_character":31},"in_reply_to":"1fa4df85_4c194186","updated":"2020-03-17 10:59:54.000000000","message":"I know that is possible but dont see a clear advantage of doing it like that for now, especially given that we need to run setenforce here anyway.","commit_id":"a2893784fa4e5c835a601501fad48230a0af337d"}],"magnum/drivers/k8s_fedora_coreos_v1/templates/kubecluster.yaml":[{"author":{"_account_id":20498,"name":"Spyros Trigazis","email":"spyridon.trigazis@cern.ch","username":"strigazi"},"change_message_id":"5e21953a4772c8d2230929e26d99f3a73acb6a22","unresolved":false,"context_lines":[{"line_number":857,"context_line":"    type: string"},{"line_number":858,"context_line":"    description: \u003e"},{"line_number":859,"context_line":"      Choose SELinux mode"},{"line_number":860,"context_line":"    default: \u0027enforcing\u0027"},{"line_number":861,"context_line":"    constraints:"},{"line_number":862,"context_line":"      - allowed_values: [\"enforcing\", \"permissive\"]"},{"line_number":863,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":2,"id":"1fa4df85_8caad916","line":860,"range":{"start_line":860,"start_character":13,"end_line":860,"end_character":24},"updated":"2020-03-17 08:11:03.000000000","message":"+1","commit_id":"a2893784fa4e5c835a601501fad48230a0af337d"},{"author":{"_account_id":20498,"name":"Spyros Trigazis","email":"spyridon.trigazis@cern.ch","username":"strigazi"},"change_message_id":"5e21953a4772c8d2230929e26d99f3a73acb6a22","unresolved":false,"context_lines":[{"line_number":859,"context_line":"      Choose SELinux mode"},{"line_number":860,"context_line":"    default: \u0027enforcing\u0027"},{"line_number":861,"context_line":"    constraints:"},{"line_number":862,"context_line":"      - allowed_values: [\"enforcing\", \"permissive\"]"},{"line_number":863,"context_line":""},{"line_number":864,"context_line":"  kube_image_digest:"},{"line_number":865,"context_line":"    type: string"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"1fa4df85_ecab4d1b","line":862,"range":{"start_line":862,"start_character":24,"end_line":862,"end_character":51},"updated":"2020-03-17 08:11:03.000000000","message":"[\"disabled\", \"enforcing\", \"permissive\"]\n\nhttp://man7.org/linux/man-pages/man5/selinux_config.5.html","commit_id":"a2893784fa4e5c835a601501fad48230a0af337d"}]}