almost. there is still an issue with selinux. i just had that case. because the client develops with selinux turned off, the docker containers don't run on my machine if i have selinux turned on.

you miss an intermediate environment (staging, pre-prod, canary, whatever you want to call it) with selinux turned on.

i don't. the customer does. and they don't seem to care. turning selinux off works for them and they are not paying me to fix that or work around it.