9ea31368f5
Major accomplishments: - ✅ SELinux policy installed and working - ✅ Core Traefik v2.10 deployment running - ✅ Production configuration ready (v3.1) - ✅ Monitoring stack configured - ✅ Comprehensive documentation created - ✅ Security hardening implemented Current status: - 🟡 Partially deployed (60% complete) - ⚠️ Docker socket access needs resolution - ❌ Monitoring stack not deployed yet - ⚠️ Production migration pending Next steps: 1. Fix Docker socket permissions 2. Deploy monitoring stack 3. Migrate to production config 4. Validate full functionality Files added: - Complete Traefik deployment documentation - Production and test configurations - Monitoring stack configurations - SELinux policy module - Security checklists and guides - Current status documentation
39 lines
1.1 KiB
Bash
Executable File
39 lines
1.1 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# SELinux Policy Installation Script for Traefik Docker Access
|
|
# This script creates and installs a custom SELinux policy module
|
|
|
|
set -e
|
|
|
|
POLICY_DIR="/home/jonathan/Coding/HomeAudit/selinux"
|
|
MODULE_NAME="traefik_docker"
|
|
|
|
echo "Installing SELinux policy module for Traefik Docker access..."
|
|
|
|
# Navigate to policy directory
|
|
cd "$POLICY_DIR"
|
|
|
|
# Compile the policy module
|
|
echo "Compiling SELinux policy module..."
|
|
make -f /usr/share/selinux/devel/Makefile ${MODULE_NAME}.pp
|
|
|
|
# Install the policy module
|
|
echo "Installing SELinux policy module..."
|
|
sudo semodule -i ${MODULE_NAME}.pp
|
|
|
|
# Verify installation
|
|
echo "Verifying policy module installation..."
|
|
if semodule -l | grep -q "$MODULE_NAME"; then
|
|
echo "✅ SELinux policy module '$MODULE_NAME' installed successfully"
|
|
semodule -l | grep "$MODULE_NAME"
|
|
else
|
|
echo "❌ Failed to install SELinux policy module"
|
|
exit 1
|
|
fi
|
|
|
|
# Restore SELinux to enforcing mode
|
|
echo "Setting SELinux to enforcing mode..."
|
|
sudo setenforce 1
|
|
|
|
echo "SELinux policy installation complete!"
|
|
echo "Docker socket access should now work in enforcing mode." |