gistfile1.txt

{% if grains['os_family'] == 'RedHat' and grains['osmajorrelease'][0] == '7' %}

include:
  - .docker

/etc/sysconfig/selinux:
  file.replace:
    - pattern: SELINUX=enforcing
    - repl: SELINUX=permissive

policycoreutils:
  pkg.installed:
    - pkgs:
      - policycoreutils
      - policycoreutils-python

libselinux-utils:
  pkg.installed

#permissive:
#  selinux.mode:
#    - require:
#      - pkg: policycoreutils
#    - watch_in:
#      - service: docker

setenforce 0:
  cmd.run:
    - onlyif: getenforce | grep Enforcing
    - watch_in:
      - service: docker
    - require:
      - pkg: libselinux-utils

{% endif %}