From 67e074165cb0b3b06aea10cc2eb75fdd96bf5235 Mon Sep 17 00:00:00 2001 From: Gabriel Sallum Date: Thu, 29 May 2025 22:32:37 -0400 Subject: [PATCH 1/2] Regarding ticket#204 on the upstream repo, allow containers to access config dir under SELinux Under SELinux enforcement, the container was denied access to the bind-mounted ./searxng directory, causing permission errors. Adding the :z flag to the volume mount in docker-compose.yml applies the correct SELinux context for shared access. --- docker-compose.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docker-compose.yml b/docker-compose.yml index 2f78cb9..b4b3101 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -29,7 +29,7 @@ services: ports: - "8080:8080" volumes: - - ./searxng:/etc/searxng:rw + - ./searxng:/etc/searxng:rw,z environment: - SEARXNG_BASE_URL=http://localhost:8080/ - SEARXNG_SECRET_KEY=$(openssl rand -hex 32) @@ -57,7 +57,7 @@ services: ports: - "3000:3000" volumes: - - ./frontend/agentic-seek-front/src:/app/src + - ./frontend/agentic-seek-front/src:/app/src:z - ./screenshots:/app/screenshots environment: - NODE_ENV=development @@ -102,4 +102,4 @@ volumes: networks: agentic-seek-net: - driver: bridge \ No newline at end of file + driver: bridge From 3ab570e76095aaafdd034ce3fe7750ba9518461a Mon Sep 17 00:00:00 2001 From: Gabriel Pontes Sallum Date: Fri, 30 May 2025 11:02:44 -0400 Subject: [PATCH 2/2] Update docker-compose.yml Seems legit I tried locally seems to work fine also Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index b4b3101..8dd20e2 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -57,7 +57,7 @@ services: ports: - "3000:3000" volumes: - - ./frontend/agentic-seek-front/src:/app/src:z + - ./frontend/agentic-seek-front/src:/app/src:rw,z - ./screenshots:/app/screenshots environment: - NODE_ENV=development