Install Docker Distribution for Red Hat on Cortex XSOAR

Install Red Hat’s Docker package.
Run the following commands.
systemctl enable docker.service
systemctl restart docker.service
Change ownership of the Docker daemon socket so members of the
dockerroot
user group have access.
Edit or create the file
/etc/docker/daemon.json
.
Enable OS group
dockerroot
access to Docker by adding the following entry to the
/etc/docker/daemon.json: "group": "dockerroot"
file. For example:
{ "group": "dockerroot" }
Restart the Docker service by running the following command.
systemctl restart docker.service
Install Cortex XSOAR.
After Cortex XSOAR is installed, run the following command to add the
demisto
os user to the
dockerroot
os group (Red Hat uses dockerroot group instead of docker).
usermod -aG dockerroot demisto
Restart the Cortex XSOAR server.
Set the required SELinux permissions.
Cortex XSOAR uses the
/var/lib/demisto/temp
directory (with subdirs) to copy files and receive files from running Docker containers. By default, when SELinux is in
enforcing
mode directories under
/var/lib/
it cannot be accessed by docker containers.
To allow containers access to the
/var/lib/demisto/temp
directory, you need to set the correct SELinux policy type, by typing the following command.
chcon -Rt svirt_sandbox_file_t /var/lib/demisto/temp
(
Optional
) Verify that the directory has the
container_file_t
SELinux type attached by running the following command.
ls -d -Z /var/lib/demisto/temp
Configure label confinement to allow Python and PowerShell containers to access other script folders.
In Cortex XSOAR
Settings
Troubleshooting
Server Configuration
, set the following parameters:
For Python containers, set
python.pass.extra.keys
to
--security-opt=label=level:s0:c100,c200
For PowerShell containers, set
powershell.pass.extra.keys
to
--security-opt=label=level:s0:c100,c200
In the Cortex XSOAR CLI, run the
/reset_containers
command.