2026

Breaking (and Recovering) SELinux

Breaking (and Recovering) SELinux

Connor Grout

This is a post about caution and how a simple mistake you can make can blow up a month after you make it. But as with anything, breaking something leads to fix it and learning a lot. This post will cover SELinux file contexts, SELinux tools such as semanage, restorecon, and matchpathcon, the nature of immutable filesystems and some fun quarks of btrfs.

The Beginning

So to start, I run OpenSUSE MicroOS as my server environment at home. This atomic server works great because all of the apps that I run are microservices. I have yet to migrate to Kubernetes, I really need to do that, so I am using podman and it’s systemd integration to run my stack. It actually works surprisingly well since everything from containers, networks, volumes, etc. are all defined in systemd unit files. This makes setup really easy because it all standardized and you can use systemctl and journalctl to manage your containers and logging.

Follow me on AllTrails

Follow me on AllTrails

Connor Grout

I have recently started getting into hiking and the outdoors as the weather is getting warmer. So I thought I’d share my AllTrails profile with anyone that’s interested in following me. I also added it to the sidebar of my blog below my Storygraph profile. I will try to post on here any really extraordinary trails I hit if I believe they are better than my average hike. I’ll also try to share any custom trails I make that I find really good.