Cairn
NousResearch/hermes-agent

SELinux bind mount labeling in Docker backend

Cluster 45106 · environments. Data as of

3 open items. Fix attempted, not merged.

The short answer

1open issue
2open PRs
4items grouped
Known?
Yes. 4 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 1 PR closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 2 PRs.

These issues and PRs concern SELinux compatibility problems with Docker backend bind mounts, exploring approaches such as adding SELinux labels to mounts or disabling SELinux labeling on enforcing hosts.

Open issues1

  • Issue#45106[Bug]: SELinux breaks Docker Backend

Open PRs2

  • PR#45111fix(docker): disable SELinux labeling for bind mounts on enforcing hosts
  • PR#71459fix(docker): label SELinux bind mounts across all sandbox mount sites

1 PR closed without merging

From the close comments: other 1

  • #45252 fix(docker): add SELinux :z labels to bind mounts (#45106) · other
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
environments
Closed issues
0
Attempts
1 PR closed without merging

For your agent

The same facts, typed.

cluster/45106.json
cluster/45106.md