helpers for local development#518
Conversation
zmiklank
commented
Apr 13, 2026
zmiklank
commented
- support selinux enabled systems
- add openssl/run_envoy_docker.sh script for easier local builds
- support selinux enabled systems - add openssl/run_envoy_docker.sh script for easier local builds Signed-off-by: Zuzana Miklankova <zmiklank@redhat.com>
zmiklank
force-pushed
the
add_openssl_run
branch
from
0977ebc to
b497902
Compare
| - ${ENVOY_DOCKER_BUILD_DIR:-/tmp/envoy-docker-build}:/build | ||
| - ${SOURCE_DIR:-..}:/source | ||
| - ${SHARED_TMP_DIR:-/tmp/bazel-shared}:${SHARED_TMP_DIR:-/tmp/bazel-shared} | ||
| - ${ENVOY_DOCKER_BUILD_DIR:-/tmp/envoy-docker-build}:/build:z |
There was a problem hiding this comment.
Is this applicable on upstream (main branch at least)?
There was a problem hiding this comment.
yup, I hope so. After some more testing I would like to contribute this upstream too.
There was a problem hiding this comment.
What kind of more tests? Remember, this is also upstream, used by other parties.
There was a problem hiding this comment.
I wanted to try to run this on Ubuntu.
|
The key change to the docker compose file is adding On SELinux-enabled systems (Fedora, RHEL, CentOS): This is necessary — without it, containers may get "permission denied" errors when accessing mounted volumes. On Ubuntu: Ubuntu does not enable SELinux by default (it uses AppArmor instead). When SELinux is not active, Docker simply ignores the The Bottom line: This will work on Ubuntu. The |
|
Claude comment above ^ @zmiklank It should be fine on Ubuntu. I guess we can merge this on the fork for branches <= 1.37 and submit it in Envoy for main? |
2 participants
