diff --git a/php/src/Docker/DockerActionManager.php b/php/src/Docker/DockerActionManager.php index ad4c12b1..03d3f08f 100644 --- a/php/src/Docker/DockerActionManager.php +++ b/php/src/Docker/DockerActionManager.php @@ -522,6 +522,9 @@ class DockerActionManager $requestBody['HostConfig']['SecurityOpt'] = ["apparmor:unconfined"]; } + // Disable SELinux for AIO containers so that it does not break them + $requestBody['HostConfig']['SecurityOpt'] = ["label:disable"]; + $mounts = []; // Special things for the backup container which should not be exposed in the containers.json @@ -553,9 +556,6 @@ class DockerActionManager } $mounts[] = ["Type" => "bind", "Source" => $volume->name, "Target" => $volume->mountPoint, "ReadOnly" => !$volume->isWritable, "BindOptions" => [ "Propagation" => "rshared"]]; } - // Special things for the watchtower and docker-socket-proxy container which should not be exposed in the containers.json - } elseif ($container->GetIdentifier() === 'nextcloud-aio-watchtower' || $container->GetIdentifier() === 'nextcloud-aio-docker-socket-proxy') { - $requestBody['HostConfig']['SecurityOpt'] = ["label:disable"]; } if (count($mounts) > 0) {