feat: fix selinux permissions each sync

- restorecon on each sync, to update selinux for new files/directories
2023-11-27 23:19:01 +11:00 · 2023-11-27 23:19:01 +11:00 · 705c02c3a1
commit 705c02c3a1
parent e18103bda9
2 changed files with 6 additions and 1 deletions
--- a/site/profiles/manifests/reposync/autosyncer.pp
+++ b/site/profiles/manifests/reposync/autosyncer.pp
@ -1,5 +1,7 @@
 # setup the autosyncer
-class profiles::reposync::autosyncer {
+class profiles::reposync::autosyncer (
+  Stdlib::Absolutepath $basepath = '/data/repos',
+) {

  # Ensure the autosyncer script is present and executable
  file { '/usr/local/bin/autosyncer':
--- a/site/profiles/templates/reposync/autosyncer.erb
+++ b/site/profiles/templates/reposync/autosyncer.erb
@ -88,4 +88,7 @@ for conf in /etc/reposync/conf.d/*.conf; do
  # After syncing each repo, fix the repository metadata
  create_repo_metadata "${snap_path}"

+  # Update selinux
+  restorecon <%= @basepath %>
+
 done