From 355a8ef9a15492b60fc4b1cc1ec0131ecca5c671 Mon Sep 17 00:00:00 2001
From: Priit Laes <plaes@plaes.org>
Date: Wed, 11 Oct 2023 13:42:33 +0300
Subject: [PATCH] docker: Add SELinux labels for rootless Podman compatibility

Volumes need to be properly re-labelled on rootless Podman
setups on Fedora.

The SELinux re-labeling bind mount option is ignored on platforms
without SELinux, so it shouldn't break existing setups.
---
 docker-compose.yml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index f15a6f74..aa7815df 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -6,8 +6,8 @@ services:
     command: -c /etc/chirpstack
     restart: unless-stopped
     volumes:
-      - ./configuration/chirpstack:/etc/chirpstack
-      - ./lorawan-devices:/opt/lorawan-devices
+      - ./configuration/chirpstack:/etc/chirpstack:z
+      - ./lorawan-devices:/opt/lorawan-devices:z
     depends_on:
       - postgres
       - mosquitto
@@ -25,7 +25,7 @@ services:
     ports:
       - 1700:1700/udp
     volumes:
-      - ./configuration/chirpstack-gateway-bridge:/etc/chirpstack-gateway-bridge
+      - ./configuration/chirpstack-gateway-bridge:/etc/chirpstack-gateway-bridge:z
     environment:
       - INTEGRATION__MQTT__EVENT_TOPIC_TEMPLATE=eu868/gateway/{{ .GatewayID }}/event/{{ .EventType }}
       - INTEGRATION__MQTT__STATE_TOPIC_TEMPLATE=eu868/gateway/{{ .GatewayID }}/state/{{ .StateType }}
@@ -40,7 +40,7 @@ services:
     ports:
       - 3001:3001
     volumes:
-      - ./configuration/chirpstack-gateway-bridge:/etc/chirpstack-gateway-bridge
+      - ./configuration/chirpstack-gateway-bridge:/etc/chirpstack-gateway-bridge:z
     depends_on:
       - mosquitto
 
@@ -57,8 +57,8 @@ services:
     image: postgres:14-alpine
     restart: unless-stopped
     volumes:
-      - ./configuration/postgresql/initdb:/docker-entrypoint-initdb.d
-      - postgresqldata:/var/lib/postgresql/data
+      - ./configuration/postgresql/initdb:/docker-entrypoint-initdb.d:Z
+      - postgresqldata:/var/lib/postgresql/data:Z
     environment:
       - POSTGRES_PASSWORD=root
 
@@ -66,7 +66,7 @@ services:
     image: redis:7-alpine
     restart: unless-stopped
     volumes:
-      - redisdata:/data
+      - redisdata:/data:z
 
   mosquitto:
     image: eclipse-mosquitto:2
@@ -74,7 +74,7 @@ services:
     ports:
       - 1883:1883
     volumes: 
-      - ./configuration/mosquitto/config/:/mosquitto/config/
+      - ./configuration/mosquitto/config/:/mosquitto/config/:Z
 
 volumes:
   postgresqldata: