---
#selinux_containers/tasks/main.yml
# -----------------------------
# Set SELinux
# -----------------------------
- name: Set SELinux context for stack
  become: true
  community.general.sefcontext:
    target: "{{ stack_root }}(/.*)?"
    setype: container_file_t
    state: present

# -----------------------------
# APPLY SELinux
# -----------------------------
- name: Apply SELinux context (stack)
  become: true
  command: restorecon -Rv "{{ stack_root }}"
  changed_when: false