!4 Init Package k3s-selinux

From: @wang--ge 
Reviewed-by: @zhu-yuncheng 
Signed-off-by: @zhu-yuncheng

k3s-selinux.spec

@@ -0,0 +1,103 @@
+#
+# spec file for package k3s-selinux
+#
+# Copyright (c) 2022 SUSE LLC
+#
+# All modifications and additions to the file contributed by third parties
+# remain the property of their copyright owners, unless otherwise agreed
+# upon. The license for this file, and modifications and additions to the
+# file, is the same license as for the pristine package itself (unless the
+# license for the pristine package is not an Open Source License, in which
+# case the license is the MIT License). An "Open Source License" is a
+# license that conforms to the Open Source Definition (Version 1.9)
+# published by the Open Source Initiative.
+
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
+#
+
+
+%define k3s_relabel_files() \
+        mkdir -p /var/lib/cni; \
+        mkdir -p /var/lib/kubelet/pods; \
+        mkdir -p /var/lib/rancher/k3s/agent/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots; \
+        mkdir -p /var/lib/rancher/k3s/data; \
+        mkdir -p /var/run/flannel; \
+        mkdir -p /var/run/k3s; \
+        restorecon -R -i /etc/systemd/system/k3s.service; \
+        restorecon -R -i /usr/lib/systemd/system/k3s.service; \
+        restorecon -R /var/lib/cni; \
+        restorecon -R /var/lib/kubelet; \
+        restorecon -R /var/lib/rancher; \
+        restorecon -R /var/run/k3s; \
+        restorecon -R /var/run/flannel
+
+%define selinux_policyver 35.5
+%define container_policyver 2.164.2-1.1
+
+Name:           k3s-selinux
+Version:        1.1.stable.1
+Release:        1
+Summary:        SELinux policy module for k3s
+
+Group:          System Environment/Base
+License:        Apache-2.0
+URL:            https://github.com/k3s-io/k3s-selinux
+Source:         https://github.com/k3s-io/k3s-selinux/archive/refs/tags/%{name}-%{version}.tar.gz
+
+BuildArch:      noarch
+BuildRequires:  container-selinux >= %{container_policyver}
+BuildRequires:  git
+BuildRequires:  selinux-policy >= %{selinux_policyver}
+BuildRequires:  selinux-policy-devel >= %{selinux_policyver}
+
+Requires:       policycoreutils, libselinux-utils
+Requires(post): selinux-policy-base >= %{selinux_policyver}, policycoreutils
+Requires(post): container-selinux >= %{container_policyver}
+Requires(postun):policycoreutils
+
+Provides:       %{name} = %{version}-%{release}
+Obsoletes:      k3s-selinux <= 0.5
+Conflicts:      rke2-selinux
+
+%description
+This package installs and sets up the SELinux policy security module for k3s.
+
+%prep
+%setup -q
+
+%build
+cd policy/microos
+make -f /usr/share/selinux/devel/Makefile k3s.pp
+
+%install
+install -d %{buildroot}%{_datadir}/selinux/packages
+install -m 644 policy/microos/k3s.pp %{buildroot}%{_datadir}/selinux/packages
+install -d %{buildroot}%{_datadir}/selinux/devel/include/contrib
+install -m 644 policy/microos/k3s.if %{buildroot}%{_datadir}/selinux/devel/include/contrib/
+install -d %{buildroot}/etc/selinux/targeted/contexts/users/
+
+%pre
+%selinux_relabel_pre
+
+%post
+%selinux_modules_install %{_datadir}/selinux/packages/k3s.pp
+if /usr/sbin/selinuxenabled ; then
+    /usr/sbin/load_policy
+    %k3s_relabel_files
+fi;
+
+%postun
+if [ $1 -eq 0 ]; then
+    %selinux_modules_uninstall k3s
+fi;
+
+%posttrans
+%selinux_relabel_post
+
+%files
+%attr(0600,root,root) %{_datadir}/selinux/packages/k3s.pp
+%{_datadir}/selinux/devel/include/contrib/k3s.if
+
+%changelog
+* Sat Jul 30 2022 zhuyuncheng <zhuyuncheng@huawei.com> - 1.1.stable.1-1
+- Init package

k3s-selinux.yaml

@@ -0,0 +1,4 @@
+version_control: github
+src_repo: k3s-io/k3s-selinux
+tag_prefix: ^v 
+seperator: .