https://www.puppet.com/community logo
Join Slack
Powered by
# voxpupuli
  • v
    not so soon IMHO and it's really just 1 additional if
  • v
    oh wow, wasn't expecting this channel to be active!
  • v
    of course we are active!
  • v
    hmm, so I'm pretty new to puppet, and just following along here trying to enable selinux. https://github.com/voxpupuli/puppet-selinux#more-advanced-usage
  • v
    I don't see any warning that I need to reboot.
  • v
    could be that it's simply not documented, but it's needed to reboot for disabled → permissive/enforcing since that's just what SELinux needs
  • v
    unless you modify the ss_initialized global variable in kernel memory
  • v
    joking, I'm not doing that in prod
  • v
    you'd be braver than most if you did ;)
  • v
    "brave"
  • v
    ewoud: I've done it before on android ;P
  • v
    spent a few years learning all the fun android things.
  • v
    binford2k: in some places I think it could mean risking your job, that requires some bravery, right? ;)
  • v
    haha
  • v
    Manouchehri: I must admit I did not know that
  • v
    amusingly I found a semi-populate EDR product that modifies LSM rules in-memory because they wanted a loadable kernel LSM.
  • v
  • v
    F32 is EOL now
  • v
  • v
    and 33 and 34 in couple of days
  • v
    just in time to add support 🎉
  • v
  • v
    the versions in Fedora and EL9 are reasonably up to date now btw: https://src.fedoraproject.org/rpms/puppet
  • v
    and since they're noarch, they should work on aarch64 too
  • v
    yes, see the apache version of it
  • v
  • v
    I think bastelfreak was considering adding a parameter to the gha-puppet workflow
  • v
    re: fedora, I don't think puppet has ever "kept up" properly with it
  • v
    I recall having to pin v23 repo for a few years in some places
  • v
    the updated action for additional packages is available at https://github.com/voxpupuli/gha-puppet/pull/17
1...343536...648Latest