Skip to content

Commit

Permalink
Add more Q&A responses
Browse files Browse the repository at this point in the history
Signed-off-by: Chris Aniszczyk <caniszczyk@gmail.com>
  • Loading branch information
caniszczyk committed Feb 20, 2017
1 parent 331df6c commit 542397e
Show file tree
Hide file tree
Showing 2 changed files with 14 additions and 6 deletions.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ https://groups.google.com/a/opencontainers.org/forum/#!forum/tob (tob@opencontai

* [Digest](https://github.com/opencontainers/tob/blob/master/proposals/digest.md)
* [Image Format Spec](https://github.com/opencontainers/tob/tree/master/proposals/image-format)
* [Selinux](https://github.com/opencontainers/tob/blob/master/proposals/selinux.md)
* [SELinux](https://github.com/opencontainers/tob/blob/master/proposals/selinux.md)
* [Tools](https://github.com/opencontainers/tob/blob/master/proposals/tools.md)

## Voting
Expand Down
18 changes: 13 additions & 5 deletions proposals/selinux.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,6 @@ Initial maintainers of the go-selinux project would be:
* Antonio Murdaca <runcom@redhat.com> (@runcom)
* Daniel J Walsh <dwalsh@redhat.com> (@rhatdan)
* Mrunal Patel <mpatel@redhat.com> (@mrunalp)
* TODO

### Code of Conduct
This project would incorporate (by reference) the OCI Code of Conduct.
Expand All @@ -31,7 +30,7 @@ This project would incorporate (by reference) the OCI Code of Conduct.
This project would incorporate the Governance and Releases processes from the OCI project template: https://github.com/opencontainers/project-template.

### Project Communications
Both of the proposed projects would continue to use existing channels in use by the OCI developer community for communication including:
The proposed project would continue to use existing channels in use by the OCI developer community for communication including:
* GitHub for issues and pull requests
* The dev@opencontainers.org email list
* The weekly OCI developer community conference call
Expand All @@ -42,7 +41,16 @@ We will probably minimize the releases of this project.

## Frequently Asked Questions (FAQ)
Q: Does this change the OCI Charter or Scope Table?
A: No. Nothing in this proposal is intended to amend the OCI Charter (https://www.opencontainers.org/about/governance) or OCI Scope Table (https://www.opencontainers.org/about/oci-scope-table).
A: No. Nothing in this proposal is intended to amend the [OCI Charter](https://www.opencontainers.org/about/governance) or [OCI Scope Table](https://www.opencontainers.org/about/oci-scope-table).

Q: Why move this out of the runc project?
A: TODO
*Q: Why move this out of the runc project?*

A: To be able to reuse this in different container projects as well as have dedicated maintainers for the SELinux library. Getting more exposure and others to use it would probably lead to completing lots of features that are missing from the libcontainer/selinux bindings. There are lots of bindings in libselinux that do not have native bindings yet. Getting other projects to use SELinux bindings would also lead to potential improvements in the bindings.

*Q: Why is versioning this package with runc insufficient today? What issues have been encountered?*

A: There's no versioning of selinux in run. For instance, we fixed something in selinux in runc because CRI-O needed it but at the same time we broke docker which was relying on it. Having fixed versions for selinux wouldn't have led to this issue since docker could have stuck to a previous version and carefully test the new version w/o pulling new changes as part of a libcontainer library bump.

*Q: Who are the other target users of go-selinux?*

A: docker, rkt, CRI-O, kubernetes, any other project out there requiring a dedicated selinux library.

0 comments on commit 542397e

Please sign in to comment.