From 42bf842202814fe01cabff7daf27f497933924b9 Mon Sep 17 00:00:00 2001 From: David Butler Date: Tue, 23 Feb 2016 12:05:13 -0600 Subject: [PATCH] Updated SELinux docs for hosts not allowing module loading --- docs/selinux.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/docs/selinux.md b/docs/selinux.md index e35c04d..b70bd77 100644 --- a/docs/selinux.md +++ b/docs/selinux.md @@ -10,6 +10,15 @@ semodule_package -o docker-openvpn.pp -m docker-openvpn.mod sudo semodule -i docker-openvpn.pp ``` +Also, some configurations don't allow containers to load kernel modules, so on the host run this: + +``` +sudo modprobe tun +``` + +So the container doesn't have to load the `tun` module. + + # Still having issues? In January 2016, Fedora based systems got an update that fixed an issue for labeling namespaced net objects under /proc