Function isUsingSELinuxLabels

src/spec-node/containerFeatures.ts:363–383

(params: DockerResolverParameters)

}

async function isUsingSELinuxLabels(params: DockerResolverParameters): Promise<boolean> {
	try {
		const { common } = params;
		const { cliHost, output } = common;
		return params.cliVariant === CLIVariant.Podman && cliHost.platform === 'linux'
			&& (await runCommandNoPty({
				exec: cliHost.exec,
				cmd: 'getenforce',
				output,
				print: true,
			})).stdout.toString().trim() !== 'Disabled'
			&& (await dockerCLI({
				...toExecParameters(params),
				print: true,
			}, 'info', '-f', '{{.Host.Security.SELinuxEnabled}}')).stdout.toString().trim() === 'true';
	} catch {
		// If we can't run the commands, assume SELinux is not enabled.
		return false;
		
	}
}

export function findContainerUsers(imageMetadata: SubstitutedConfig<ImageMetadataEntry[]>, composeServiceUser: string | undefined, imageUser: string) {
	const reversed = imageMetadata.config.slice().reverse();