Merge pull request #29464 from andrewhsu/revert-selinux

[1.12.x] Revert depend on docker-selinux for centos-7.3+

hack/make/.build-rpm/docker-engine.spec

@@ -86,11 +86,7 @@ Requires: device-mapper >= 1.02.90-2
 # RE: rhbz#1195804 - ensure min NVR for selinux-policy
 %if 0%{?with_selinux}
 Requires: selinux-policy >= %{selinux_policyver}
-%if 0%{?centos} >= 7
-Requires(pre): docker-selinux
-%else
 Requires(pre): %{name}-selinux >= %{version}-%{release}
-%endif # centos 7+
 %endif # with_selinux
 
 # conflicting packages

hack/make/build-rpm

@@ -132,12 +132,13 @@ set -e
 				--define '_experimental ${DOCKER_EXPERIMENTAL:-0}' \
 				${rpmName}.spec
 		EOF
-
-		# by default do not create selinux rpm
-		# if there exists a selinux policy dir specifically for distro version
-		# then build a selinux rpm with the policy in the policy dir
-		if [ -d "./contrib/selinux-$version" ]; then
-			selinuxDir="selinux-${version}"
+		# selinux policy referencing systemd things won't work on non-systemd versions
+		# of centos or rhel, which we don't support anyways
+		if [ "${suite%.*}" -gt 6 ] && [[ "$version" != opensuse* ]]; then
+			selinuxDir="selinux"
+			if [ -d "./contrib/selinux-$version" ]; then
+				selinuxDir="selinux-${version}"
+			fi
 			cat >> "$DEST/$version/Dockerfile.build" <<-EOF
 				RUN tar -cz -C /usr/src/${rpmName}/contrib/${selinuxDir} -f /root/rpmbuild/SOURCES/${rpmName}-selinux.tar.gz ${rpmName}-selinux
 				RUN rpmbuild -ba \
@@ -148,7 +149,6 @@ set -e
 						${rpmName}-selinux.spec
 			EOF
 		fi
-
 		tempImage="docker-temp/build-rpm:$version"
 		( set -x && docker build -t "$tempImage" -f $DEST/$version/Dockerfile.build . )
 		docker run --rm "$tempImage" bash -c 'cd /root/rpmbuild && tar -c *RPMS' | tar -xvC "$DEST/$version"