feat: hardening, support for towards rhel + selinux (not finished), patching for volumes

Author: syntaxsdev

Makefile

@@ -16,3 +16,13 @@ clean-tests:
 
 tests:
 	source .venv/bin/activate && pytest -m e2e
+
+patch_templates:
+	@VENV=$$(mktemp -d) && \
+	uv venv $$VENV && \
+	source $$VENV/bin/activate && \
+	uv pip install ruamel.yaml && \
+	python scripts/selinuxify_template_patch.py && \
+	rm -rf $$VENV
+
+.PHONY: patch_templates tests clean-tests build_appwrite_cli build_appwrite_playwright

README.md

@@ -10,11 +10,12 @@ pip install appwrite-lab
 ## Appwrite Lab features (in progress)
 - [x] Spin up ephemeral Appwrite instances with Docker/Podman
 - [x] Automatically grab API keys (for programmatic access)
-- [ ] Test suite
 - [x] Environment syncing
-- [ ] Appwrite data population
 - [x] Clean teardowns
 
+## Appwrite Lab in progress features
+- [ ] Test suite
+- [ ] Appwrite data population
 
 ## CLI Usage
 ### Help with appwrite-lab CLI
@@ -44,3 +45,9 @@ or sync a specific resource:
 ```sh
 appwrite-lab sync test-lab --resource functions
 ```
+
+## Known Troubleshooting
+### Podman support and Selinux
+Since I am mimicking the `compose` file that Appwrite provides, it was not designed to work rootless, but I have adjusted to work also on Fedora. You will need to turn `selinux` off for now to use.
+
+

appwrite_lab/_orchestrator.py

@@ -34,10 +34,6 @@ def __post_init__(self):
                 )
 
 
-@dataclass
-class CompletedProcess: ...
-
-
 class OrchestratorError(Exception): ...
 
 
@@ -313,17 +309,16 @@ def deploy_playwright_automation(
         with tempfile.TemporaryDirectory() as temp_dir:
             shutil.copytree(automation_dir, temp_dir, dirs_exist_ok=True)
             function = Path(temp_dir) / "automations" / "scripts" / f"{automation}.py"
-
             cmd = [
                 self.util,
                 "run",
                 "--network",
                 "host",
-                # "--rm",
+                "--rm",
                 "-u",
                 f"{os.getuid()}:{os.getgid()}",
                 "-v",
-                f"{temp_dir}:{container_work_dir}",
+                f"{temp_dir}:{container_work_dir}:Z",
                 *args,
                 *docker_env_args,
                 APPWRITE_PLAYWRIGHT_IMAGE,