From 0e97fdbab095b80bceef0604ca8fced0013bab6f Mon Sep 17 00:00:00 2001
From: khaledk2 <khaledk2@hotmail.com>
Date: Sun, 1 Dec 2024 14:43:22 +0000
Subject: [PATCH] debug 5

---
 ansible/idr-omero-readonly.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/ansible/idr-omero-readonly.yml b/ansible/idr-omero-readonly.yml
index 2fc76b0b..c9294cae 100644
--- a/ansible/idr-omero-readonly.yml
+++ b/ansible/idr-omero-readonly.yml
@@ -35,6 +35,22 @@
 
   tasks:
   # Lock down the read-write node in the read-only cluster
+  - name: install checkpolicy
+    become: true
+    ansible.builtin.dnf:
+      update_cache: true
+      name:
+        - checkpolicy
+        - policycoreutils
+        - ipa-selinux
+  - name: Set selinux vars for nfs
+    ansible.posix.seboolean:
+      name:
+        - nfs_export_all_ro
+        - nfs_export_all_rw
+      state: true
+      persistent: true
+
   - name: check selinux
     debug:
      msg: "SELinux is enabled or permissive"