mirror of
https://github.com/xcat2/confluent.git
synced 2026-11-12 19:16:18 +00:00
551658b5fe
The initramfs writes the overlay upper layer before the SELinux policy is loaded, so those files are unlabeled_t. On an enforcing image / itself is unlabeled, and logind, getty and sshd fail. Label exactly the upper layer paths like el9-diskless does. The root is an overlay in untethered mode too, so this covers both. chcon comes from the image, the initramfs has none.