Migrate Gitea to rootless Podman / SELinux

- Front git-over-SSH with host sshd and live key lookup - Build and load custom SELinux policies oci_log and gitea_ssh
2026-09-01 01:42:33 -04:00
parent 601a889172
commit a1ef6e76a5
22 changed files with 463 additions and 129 deletions
@@ -0,0 +1,9 @@
+module gitea_ssh 1.0;
+
+require {
+    type sshd_t;
+    type ssh_exec_t;
+    class file { getattr read open map execute execute_no_trans };
+}
+
+allow sshd_t ssh_exec_t:file { getattr read open map execute execute_no_trans };