{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes-incubator/service-catalog/issues/377","repository_url":"https://api.github.com/repos/kubernetes-incubator/service-catalog","labels_url":"https://api.github.com/repos/kubernetes-incubator/service-catalog/issues/377/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes-incubator/service-catalog/issues/377/comments","events_url":"https://api.github.com/repos/kubernetes-incubator/service-catalog/issues/377/events","html_url":"https://github.com/kubernetes-incubator/service-catalog/pull/377","id":207723187,"number":377,"title":"Make build container privileged to avoid changing filesystem SELinux context on host","user":{"login":"pmorie","id":366488,"avatar_url":"https://avatars.githubusercontent.com/u/366488?v=3","gravatar_id":"","url":"https://api.github.com/users/pmorie","html_url":"https://github.com/pmorie","followers_url":"https://api.github.com/users/pmorie/followers","following_url":"https://api.github.com/users/pmorie/following{/other_user}","gists_url":"https://api.github.com/users/pmorie/gists{/gist_id}","starred_url":"https://api.github.com/users/pmorie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pmorie/subscriptions","organizations_url":"https://api.github.com/users/pmorie/orgs","repos_url":"https://api.github.com/users/pmorie/repos","events_url":"https://api.github.com/users/pmorie/events{/privacy}","received_events_url":"https://api.github.com/users/pmorie/received_events","type":"User","site_admin":false},"labels":[{"id":485046198,"url":"https://api.github.com/repos/kubernetes-incubator/service-catalog/labels/cncf-cla:%20yes","name":"cncf-cla: yes","color":"ededed","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-02-15T06:58:24Z","updated_at":"2017-02-15T06:58:47Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/kubernetes-incubator/service-catalog/pulls/377","html_url":"https://github.com/kubernetes-incubator/service-catalog/pull/377","diff_url":"https://github.com/kubernetes-incubator/service-catalog/pull/377.diff","patch_url":"https://github.com/kubernetes-incubator/service-catalog/pull/377.patch"},"body":"This is the least disruptive way to enable containerized builds with SELinux that doesn't trash the labels on my home directory.  Privileged containers get `spc_t` which is an unconfined type.  Normal containers get SELinux contexts that make them unable to to use files in normal user home directories.  It's possible to just get the SELinux type by setting `security-opt`, but docker recently had a breaking API change that makes it impossible to write a security opt setting that will work on all dockers.  So, for now, privileged container is the way to go without hacking up the makefile to check for docker version (which I would be willing to do if poeple have objections to privileged containers)."},"comment":{"url":"https://api.github.com/repos/kubernetes-incubator/service-catalog/issues/comments/279932312","html_url":"https://github.com/kubernetes-incubator/service-catalog/pull/377#issuecomment-279932312","issue_url":"https://api.github.com/repos/kubernetes-incubator/service-catalog/issues/377","id":279932312,"user":{"login":"pmorie","id":366488,"avatar_url":"https://avatars.githubusercontent.com/u/366488?v=3","gravatar_id":"","url":"https://api.github.com/users/pmorie","html_url":"https://github.com/pmorie","followers_url":"https://api.github.com/users/pmorie/followers","following_url":"https://api.github.com/users/pmorie/following{/other_user}","gists_url":"https://api.github.com/users/pmorie/gists{/gist_id}","starred_url":"https://api.github.com/users/pmorie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pmorie/subscriptions","organizations_url":"https://api.github.com/users/pmorie/orgs","repos_url":"https://api.github.com/users/pmorie/repos","events_url":"https://api.github.com/users/pmorie/events{/privacy}","received_events_url":"https://api.github.com/users/pmorie/received_events","type":"User","site_admin":false},"created_at":"2017-02-15T06:58:47Z","updated_at":"2017-02-15T06:58:47Z","body":"And now I'm completely unsure of whether travis will let us run a priv'd container.  I doubt it very much!"}}
{"actor":{"display_login":"pmorie"}}