diff --git a/playbooks/ansible/roles/samba.setup/tasks/gpfs/main.yml b/playbooks/ansible/roles/samba.setup/tasks/gpfs/main.yml index ed97d539..13790017 100644 --- a/playbooks/ansible/roles/samba.setup/tasks/gpfs/main.yml +++ b/playbooks/ansible/roles/samba.setup/tasks/gpfs/main.yml @@ -1 +1,12 @@ --- +- name: Run smbd unconfined + when: config.be.variant == 'vfs' + block: + - name: Configure SElinux context for smbd + sefcontext: + target: /usr/sbin/smbd + setype: bin_t + state: present + + - name: Restore SElinux context + command: restorecon /usr/sbin/smbd diff --git a/playbooks/ansible/roles/sit.gpfs/templates/smb_share.conf.j2 b/playbooks/ansible/roles/sit.gpfs/templates/smb_share.conf.j2 index 2e38cdc9..830ed8fa 100644 --- a/playbooks/ansible/roles/sit.gpfs/templates/smb_share.conf.j2 +++ b/playbooks/ansible/roles/sit.gpfs/templates/smb_share.conf.j2 @@ -1,6 +1,6 @@ [{{ name }}-{{ config.be.name }}-{{ config.be.variant }}] comment = Volume '{{ name }}' from {{ config.be.name }}({{ config.be.variant }}) -vfs objects = acl_xattr +vfs objects = acl_xattr {%- if config.be.variant == 'vfs' %} gpfs{% endif +%} path = {{ path }} read only = no {%- for option, value in volume.samba.options.items() | default([]) +%}