From 9fc9f61d005e321ddcc1cd8590da5d8e1af4f8c7 Mon Sep 17 00:00:00 2001
From: rabi <ramishra@redhat.com>
Date: Wed, 11 Oct 2023 14:05:54 +0530
Subject: [PATCH] Don't label host files with container_file_t

---
 .../config/ceilometer_agent_compute.json         | 16 ++++++++--------
 .../config/ceilometer_agent_ipmi.json            | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/templates/ceilometercompute/config/ceilometer_agent_compute.json b/templates/ceilometercompute/config/ceilometer_agent_compute.json
index 97b0f2af..924d2e93 100644
--- a/templates/ceilometercompute/config/ceilometer_agent_compute.json
+++ b/templates/ceilometercompute/config/ceilometer_agent_compute.json
@@ -13,13 +13,13 @@
         "/var/lib/openstack/config/ceilometer/ceilometer-agent-compute.json:/var/lib/kolla/config_files/config.json:z",
         "/var/log/containers/ceilometer:/var/log/containers/ceilometer:z",
         "/run/libvirt:/run/libvirt:shared,z",
-        "/etc/hosts:/etc/hosts:z",
-        "/etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:z",
-        "/etc/localtime:/etc/localtime:z",
-        "/etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:z",
-        "/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:z",
-        "/dev/log:/dev/log:z",
-        "/etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:z",
-        "/etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:z"
+        "/etc/hosts:/etc/hosts:ro",
+        "/etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro",
+        "/etc/localtime:/etc/localtime:ro",
+        "/etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro",
+        "/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro",
+        "/dev/log:/dev/log",
+        "/etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro",
+        "/etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro"
     ]
 }
diff --git a/templates/ceilometercompute/config/ceilometer_agent_ipmi.json b/templates/ceilometercompute/config/ceilometer_agent_ipmi.json
index c9422e8a..7dfd38dc 100644
--- a/templates/ceilometercompute/config/ceilometer_agent_ipmi.json
+++ b/templates/ceilometercompute/config/ceilometer_agent_ipmi.json
@@ -13,13 +13,13 @@
         "/var/lib/openstack/config/ceilometer/ceilometer-agent-ipmi.json:/var/lib/kolla/config_files/config.json:z",
         "/var/log/containers/ceilometer:/var/log/containers/ceilometer:z",
         "/run/libvirt:/run/libvirt:shared,z",
-        "/etc/hosts:/etc/hosts:z",
-        "/etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:z",
-        "/etc/localtime:/etc/localtime:z",
-        "/etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:z",
-        "/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:z",
-        "/dev/log:/dev/log:z",
-        "/etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:z",
-        "/etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:z"
+        "/etc/hosts:/etc/hosts:ro",
+        "/etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro",
+        "/etc/localtime:/etc/localtime:ro",
+        "/etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro",
+        "/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro",
+        "/dev/log:/dev/log",
+        "/etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro",
+        "/etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro"
     ]
 }