treydock

From the output it looks like 4.0.0 of OnDemand is trying to be installed but it sees newer dependencies associated with 4.0.1. I would try running `apt-get update` then re-run...

This can open up issues if that gem was built with different version of Ruby. That location also looks custom. ``` $ sudo dnf provides /usr/local/share/gems/gems/sqlite3-1.7.3-x86_64-linux/lib Updating Subscription Management repositories....

I took fresh OnDemand install for 3.1 and seeing issues, not sure if related. ``` [root@ca7cd0983147 /]# scl enable ondemand -- gem install sqlite3 --no-doc [root@ca7cd0983147 /]# scl enable ondemand...

This needs `ondemand_use_nfs` and `use_nfs_home_dirs` booleans enabled https://osc.github.io/ood-documentation/latest/installation/modify-system-security.html

Those booleans are supposed to be enabled by default however. So maybe there is a gap. Run the command in docs: ``` cat /var/log/audit/audit.log | audit2allow -M ood ``` And...

It should be in same CWD as `ood.pp`. If you leave off `-M ood` it should print the policy but the policy with `-M ood` should have been written to...

``` module ood 1.0; require { type sysfs_t; type systemd_userdbd_runtime_t; type nfs_t; type ood_apps_public_t; type httpd_t; type var_lib_t; type ood_pun_t; type admin_home_t; class file { execute map read }; class...

```diff diff --git a/packaging/rpm/ondemand-selinux.te b/packaging/rpm/ondemand-selinux.te index ef3ecbd46..c9b46fd79 100644 --- a/packaging/rpm/ondemand-selinux.te +++ b/packaging/rpm/ondemand-selinux.te @@ -149,14 +149,11 @@ tunable_policy(`ondemand_manage_vmblock',` gen_tunable(ondemand_use_nfs, true) tunable_policy(`ondemand_use_nfs && use_nfs_home_dirs',` - require { - type nfs_t; - }...

The Dockerfile.dev is closest to "production" install of OnDemand but still not something I'd recommend for production as it's only intended for developers of OnDemand. OnDemand itself isn't really designed...

What I'm doing is just leaving that Dockerfile, though we may want to remove it if we use Dockerfile.dev and Dockerfile is unused. I'm creating `packaging/container/Dockerfile` for the packaged container