[Libguestfs] [COMMON PATCH 0/1] mlcustomize: skip SELinux relabeling if it's disabled

Andrey Drobyshev andrey.drobyshev at virtuozzo.com
Fri Apr 21 18:01:40 UTC 2023


This patch effectively limits the number of cases when we would want to
do a complete SELinux relabeling on Linux guest conversion.

This was brought to my attention as we've recently had a support case
when the conversion was taking too much time mostly because of
relabeling performed with "setfiles -F".

Although this patch might be worthy of taking as it is, I'd also like to
clarify, do we really need relabeling of the entire file system during
conversion?  What exactly might go wrong here if we don't do that?
Since this process might take hours on VMs big enough, it would be
beneficial to be able to limit number of such cases even further, if
possible. Unfortunately I couldn't find any hints in the libguestfs commit
history as the relabeling code goes back to 0131d6f666 ("New tool: virt-v2v.").

Roman Kagan (1):
  customize: skip SELinux relabeling if it's disabled

 mlcustomize/SELinux_relabel.ml | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

-- 
2.31.1



More information about the Libguestfs mailing list