# OOD 2.0 in Rocky 8 selinux issue

**URL:** https://discourse.openondemand.org/t/ood-2-0-in-rocky-8-selinux-issue/1809
**Category:** Get Help
**Created:** [November 24, 2021, 6:54pm UTC](https://discourse.openondemand.org/t/ood-2-0-in-rocky-8-selinux-issue/1809 "2021-11-24T18:54:20Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![kjdalenberg79](https://avatars.discourse-cdn.com/v4/letter/k/977dab/32.png) [@kjdalenberg79](https://discourse.openondemand.org/u/kjdalenberg79)
#### Post date: [November 24, 2021, 6:54pm UTC](https://discourse.openondemand.org/t/ood-2-0-in-rocky-8-selinux-issue/1809/1 "2021-11-24T18:54:20Z")

</div>

I’ve been asked to install OOD on a Rocky 8 system. I got the install to work, I now have an selinux issue after logging into the web interface:

Error – Permission denied @ dir\_s\_mkdir - /var/run/ondemand-nginx  
Run ‘nginx\_stage --help’ to see a full list of available command line options.

I installed the ondemand selinux rpm as per the instructions. If it’s just a matter of manually doing the selinux module steps, I can figure out how to do that. I was wondering if anyone else has seen this.

---

<div class="post-metadata">

### Author: ![azric](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/azric/32/63_2.png) [@azric](https://discourse.openondemand.org/u/azric)
#### Post date: [November 24, 2021, 8:14pm UTC](https://discourse.openondemand.org/t/ood-2-0-in-rocky-8-selinux-issue/1809/2 "2021-11-24T20:14:01Z")

</div>

In CentOS 7, I had to add

[ric@ood tmpfiles.d]$ cat /etc/tmpfiles.d/ood.conf

# SELinux dir creates for Open OnDemand

# Type Path Mode UID GID Age Argument

d /run/ondemand-nginx 0755 root root - -

Z /run/ondemand-nginx - - - - -

The ood packages set that up, but it vanishes across a reboot and needs to be remade (d line) and chcon’ed (Z line).

If nginx will start after a

restorecon -R -v /run/ondemand-nginx

then the above ood.conf file may be a good fit. Note /var/run is a symlink to /run, and I think “/run/” is now preferred to “/var/run/”

Cheers,

Ric

![image001.png](https://us1.discourse-cdn.com/flex015/uploads/osc/original/1X/1b80fca88e42f0dc675750eb0d5d529a0b905d86.png)

![image002.png](https://us1.discourse-cdn.com/flex015/uploads/osc/original/1X/bed267d3cb5c87fdcfbeedd15cb6808ea6d9c1b0.png)

---

<div class="post-metadata">

### Author: ![tdockendorf](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/tdockendorf/32/202_2.png) [@tdockendorf](https://discourse.openondemand.org/u/tdockendorf)
#### Post date: [November 24, 2021, 9:11pm UTC](https://discourse.openondemand.org/t/ood-2-0-in-rocky-8-selinux-issue/1809/3 "2021-11-24T21:11:18Z")

</div>

This was fixed and not yet released: [Add tmpfiles.d file for ondemand-nginx (Release 2.0) by treydock · Pull Request #1501 · OSC/ondemand · GitHub](https://github.com/OSC/ondemand/pull/1501) and [Release Version 2.0.19 · OSC/ondemand · GitHub](https://github.com/OSC/ondemand/releases/tag/v2.0.19). @jeff.ohrstrom can provide an idea of when 2.0.19 will be publicly accessible in repos.

---

<div class="post-metadata">

### Author: ![kjdalenberg79](https://avatars.discourse-cdn.com/v4/letter/k/977dab/32.png) [@kjdalenberg79](https://discourse.openondemand.org/u/kjdalenberg79)
#### Post date: [November 29, 2021, 2:05pm UTC](https://discourse.openondemand.org/t/ood-2-0-in-rocky-8-selinux-issue/1809/4 "2021-11-29T14:05:29Z")

</div>

Thanks @tdockendorf for the fast reply. I will pass that info onto the group I am working with.

---

<div class="post-metadata">

### Author: ![westburg.2](https://avatars.discourse-cdn.com/v4/letter/w/0ea827/32.png) [@westburg.2](https://discourse.openondemand.org/u/westburg.2)
#### Post date: [May 26, 2022, 4:09pm UTC](https://discourse.openondemand.org/t/ood-2-0-in-rocky-8-selinux-issue/1809/5 "2022-05-26T16:09:45Z")

</div>


