enable SELinux and a reboot can take forever

Adding more machines for INTERDUBS. They get tested, triaged and configured for a ridiculous long time. That way once they are production machines they do only one thing: Run.

We experimented with benchmarking the performance effects of SELinux. As we expected it is not worth disabling. But now we know. We also know something we should have known: Enabling SELinux again on a bigger file system will make the next reboot take forever. Hours. Of course it makes sense, since all files will have to be relabeled.

Leave a Reply

You must be logged in to post a comment.