opensuse: install correct security packages

ddterm · Feb 23, 2025 · 1737f87 · 1737f87
1 parent 3bf6565
commit 1737f87
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 3 deletions.
diff --git a/opensuse-leap-15.6.pkr.hcl b/opensuse-leap-15.6.pkr.hcl
@@ -9,7 +9,7 @@ source "qemu" "opensuseleap156" {
   qmp_enable = var.headless
   disk_discard = "unmap"
   http_content = {
-    "/opensuse.xml" = templatefile("${path.root}/opensuse.xml", { path = path, hostname = "opensuseleap156", product = "Leap" })
+    "/opensuse.xml" = templatefile("${path.root}/opensuse.xml", { path = path, hostname = "opensuseleap156", product = "Leap", security = "apparmor" })
   }
   ssh_timeout = "1h"
   ssh_username = "vagrant"

diff --git a/opensuse-tumbleweed.pkr.hcl b/opensuse-tumbleweed.pkr.hcl
@@ -25,7 +25,7 @@ source "qemu" "opensusetumbleweed" {
   qmp_enable = var.headless
   disk_discard = "unmap"
   http_content = {
-    "/opensuse.xml" = templatefile("${path.root}/opensuse.xml", { path = path, hostname = "opensusetumbleweed", product = "openSUSE" })
+    "/opensuse.xml" = templatefile("${path.root}/opensuse.xml", { path = path, hostname = "opensusetumbleweed", product = "openSUSE", security = "selinux" })
   }
   ssh_timeout = "1h"
   ssh_username = "vagrant"

diff --git a/opensuse.xml b/opensuse.xml
@@ -78,12 +78,15 @@ chmod 0440 /etc/sudoers.d/vagrant
       <package>spice-webdavd</package>
     </packages>
     <patterns config:type="list">
-      <pattern>apparmor</pattern>
+      <pattern>${security}</pattern>
       <pattern>enhanced_base</pattern>
       <pattern>gnome</pattern>
       <pattern>gnome_x11</pattern>
     </patterns>
   </software>
+  <security>
+    <lsm_select>${security}</lsm_select>
+  </security>
   <users config:type="list">
     <user>
       <encrypted config:type="boolean">false</encrypted>