docker: Introduce DOCKER_SELINUX variable

Author: ricardobranco777

lib/containers/bats.pm

@@ -70,6 +70,8 @@ sub run_command {
 sub configure_docker {
     my $docker_opts = "-H unix:///var/run/docker.sock --insecure-registry localhost:5000 --log-level warn";
     $docker_opts .= " --experimental" if get_var("DOCKER_EXPERIMENTAL");
+    # SELinux is not enabled by default due to https://bugzilla.opensuse.org/show_bug.cgi?id=1252290
+    $docker_opts .= " --selinux-enabled" if get_var("DOCKER_SELINUX");
     my $port = 2375;
     if (get_var("DOCKER_TLS")) {
         $port++;

tests/containers/README.md

@@ -20,6 +20,7 @@ The tests rely on some variables:
 | variable | description |
 | --- | --- |
 | `DOCKER_EXPERIMENTAL` | Enable experimental features in Docker |
+| `DOCKER_SELINUX` | Enable SELinux in Docker daemon |
 | `DOCKER_TLS` | Enable TLS in Docker as documented [here](https://docs.docker.com/engine/security/protect-access/) |
 | `GITHUB_PATCHES` | List of github PR id's containing upstream test patches |
 | `OCI_RUNTIME` | OCI runtime to use: `runc` or `crun` |