me
/
guix
Archived
1
0
Fork 0

doc: Tweak SELinux instructions.

* doc/guix.texi (SELinux Support): Add note about 'guix-install.sh'.
Provide the absolute file name of 'guix-daemon.cil'.  Wrap important
commands in @example.  Suggest relabeling just /gnu and /var/guix
instead of all of /.  Add "systemctl restart guix-daemon".
master
Ludovic Courtès 2023-05-25 11:55:10 +02:00 committed by Ludovic Courtès
parent 4166b583fb
commit b59c18f761
No known key found for this signature in database
GPG Key ID: 090B11993D9AEBB5
1 changed files with 22 additions and 5 deletions

View File

@ -1559,16 +1559,33 @@ be used on Guix System.
@subsubsection Installing the SELinux policy @subsubsection Installing the SELinux policy
@cindex SELinux, policy installation @cindex SELinux, policy installation
@quotation Note
The @code{guix-install.sh} binary installation script offers to perform
the steps below for you (@pxref{Binary Installation}).
@end quotation
To install the policy run this command as root: To install the policy run this command as root:
@example @example
semodule -i etc/guix-daemon.cil semodule -i /var/guix/profiles/per-user/root/current-guix/share/selinux/guix-daemon.cil
@end example @end example
Then relabel the file system with @code{restorecon -vR /} or by a Then, as root, relabel the file system, possibly after making it
different mechanism provided by your system. You may need to remount writable:
@file{/gnu/store} to make it writable first, e.g. with @code{mount -o
remount,rw /gnu/store}. @example
mount -o remount,rw /gnu/store
restorecon -R /gnu /var/guix
@end example
At this point you can start or restart @command{guix-daemon}; on a
distribution that uses systemd as its service manager, you can do that
with:
@example
systemctl restart guix-daemon
@end example
Once the policy is installed, the file system has been relabeled, and Once the policy is installed, the file system has been relabeled, and
the daemon has been restarted, it should be running in the the daemon has been restarted, it should be running in the