🐧 🔒 All roles: Append `:z` to volumes for SELinux labels

DESCRIPTION

• Append :z to all Docker container volumes to provide out-of-the-box support for SELinux (see below links).
  • https://projectatomic.io/blog/2015/06/using-volumes-with-docker-can-cause-problems-with-selinux/
  • https://docs.docker.com/storage/bind-mounts/#configure-the-selinux-label
• This also provides out-of-the-box support for anyone running Cauldron on Fedora Linux or other SELinux-enabled distros.

This is done as documented by the Ansible docker_container. See the volumes option in the Parameters table.

ISSUES RELATED

• none

VERSIONS

WEB_IMAGE_NAME: "cauldronio/webserver:1.14.3"
WORKER_IMAGE_NAME: "cauldronio/worker:1.14.3"
ODFE_CONFIG_IMAGE_NAME: "cauldronio/odfe-config:0.1.19"
PA_TO_ES_IMAGE_NAME: "cauldronio/pa-to-es:0.1.2"
ELASTIC_IMAGE_NAME: "cauldronio/opendistro-for-elasticsearch:1.13.2"
KIBANA_IMAGE_NAME: "amazon/opendistro-for-elasticsearch-kibana:1.13.2"
SYSLOG_IMAGE_NAME: "balabit/syslog-ng:3.31.2"
BACKUP_IMAGE_NAME: "cauldronio/backup-rotate:0.3"
DB_IMAGE_NAME: "mariadb:10.5"
NGINX_IMAGE_NAME: 'nginx:1.18'

VARIABLES ADDED/DELETED (In host_vars)

• docker_container.volumes
• vars.dev_volumes
• vars.webserver_volumes
• vars.worker_volumes

REPOSITORIES CHANGED

• Deployment: -