Mount smackfs into containers

[Bug/Feature]   There were no possibilities to check SMACK labels being
                inside the container
[Cause]         Smackfs was not mounted
[Solution]      N/A
[Verification]  Build, install, check the result of command:
                ls -1Z # (inside container)
                Should output labels, not '?'

Change-Id: I8aaf961b05e87725df85b6031efb60c45142b977

diff --git a/server/configs/libvirt-config/business.xml b/server/configs/libvirt-config/business.xml
index f2317a8..8f044c0 100644 (file)
--- a/server/configs/libvirt-config/business.xml
+++ b/server/configs/libvirt-config/business.xml
@@ -109,5 +109,12 @@
       <source dir='/var/run/containers/business/run'/>
       <target dir='/var/run'/>
     </filesystem>
+    <!-- Enable access to the SMACK labels -->
+    <!-- TODO: This only helps investigating smack problems,
+               and should be removed eventually -->
+    <filesystem type='mount'>
+      <source dir='/sys/fs/smackfs'/>
+      <target dir='/sys/fs/smackfs'/>
+    </filesystem>
   </devices>
 </domain>

diff --git a/server/configs/libvirt-config/private.xml b/server/configs/libvirt-config/private.xml
index 7df0db4..26cf1f6 100644 (file)
--- a/server/configs/libvirt-config/private.xml
+++ b/server/configs/libvirt-config/private.xml
@@ -109,5 +109,12 @@
       <source dir='/var/run/containers/private/run'/>
       <target dir='/var/run'/>
     </filesystem>
+    <!-- Enable access to the SMACK labels -->
+    <!-- TODO: This only helps investigating smack problems,
+               and should be removed eventually -->
+    <filesystem type='mount'>
+      <source dir='/sys/fs/smackfs'/>
+      <target dir='/sys/fs/smackfs'/>
+    </filesystem>
   </devices>
 </domain>