SELinux blocking collectors

[KDisen]

I've been trying to implement this but have been facing issues with SELinux. If I set SELinux to permissive, I can see all of the containers in zabbix. Once I enforce selinux, I start getting collector errors.

I checked my audit.log for podman or prometheus, but I don't receive any denials...

level=ERROR source=collector.go:127 msg="collector failed" name=container duration_seconds=1.782841557 err="deadline exceeded\ngithub.com/containers/prometheus-podman-exporter/pdcs.init\n\t:1\nruntime.doInit1\n\t/opt/hostedtoolcache/go/1.24.7/x64/src/runtime/proc.go:7410\nruntime.doInit\n\t/opt/hostedtoolcache/go/1.24.7/x64/src/runtime/proc.go:7377\nruntime.main\n\t/opt/hostedtoolcache/go/1.24.7/x64/src/runtime/proc.go:254\nruntime.goexit\n\t/opt/hostedtoolcache/go/1.24.7/x64/src/runtime/asm_amd64.s:1700"

Any suggestions will be appreciated.

[navidys]

Hi @KDisen

Can you please provide more information:

1- attach the "podman system info"
2- prometheus podman exporter version

Regards

[KDisen]

podmanInfo.txt

prometheus podman exporter version - latest