From 43d8ee09de0d240d0466b0d9f012314fa013fd6a Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Mon, 2 Oct 2023 09:07:11 -0400
Subject: [PATCH] tier-0: Add container-selinux

Because currently trying to layer it on later causes issues.
---
 tier-0/manifest.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tier-0/manifest.yaml b/tier-0/manifest.yaml
index 4c79ea0..fc9e0e0 100644
--- a/tier-0/manifest.yaml
+++ b/tier-0/manifest.yaml
@@ -57,6 +57,8 @@ packages:
   # Even in tier-0, we have this.  If you don't want SELinux today, you'll need
   # to build a custom image.
   - selinux-policy-targeted
+  # And we want container-selinux because trying to layer it on later currently causes issues.
+  - container-selinux
   # Needed for tpm2 bound luks
   - tpm2-tools