From b419e927ee1cfffb5591e2e796b3b41d15fd7509 Mon Sep 17 00:00:00 2001 From: Yu Watanabe Date: Thu, 4 Sep 2025 06:17:22 +0900 Subject: [PATCH] test: add comment about custom autorelabel.service Salvaged from ead814a0b0f64c572282b9e27a0a995893f10cf0. --- test/units/autorelabel.service | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/test/units/autorelabel.service b/test/units/autorelabel.service index 5f8386ee85..f0f4db397d 100644 --- a/test/units/autorelabel.service +++ b/test/units/autorelabel.service @@ -1,4 +1,15 @@ # SPDX-License-Identifier: LGPL-2.1-or-later + +# We use a custom autorelabel service instead of the SELinux provided set of +# units & a generator, since the generator overrides the default target to the +# SELinux one when it detects /.autorelabel. However, we use systemd.unit= on +# the kernel command cmdline which always takes precedence, rendering all +# SELinux efforts useless. Also, pulling in selinux-autorelabel.service +# explicitly doesn't work either, as it doesn't check for the presence of +# /.autorelabel and does the relabeling unconditionally which always ends with +# a reboot, so we end up in a reboot loop (and it also spews quite a lot of +# errors as it wants /etc/fstab and dracut-initramfs-restore). + [Unit] Description=Relabel all filesystems DefaultDependencies=no