Ensure InitLabel only sets process label when unset

bitoku · bitoku · commit 4e2f7dbed731 · 2025-12-16T12:36:14.000Z
Signed-off-by: Ayato Tokubi &lt;atokubi@redhat.com&gt;
diff --git a/server/container_create.go b/server/container_create.go
@@ -1015,9 +1015,14 @@ func (s *Server) setupContainerMountsAndSystemd(ctr container.Container, sb *san
 	if ctr.WillRunSystemd() {
 		var err error
 
-		processLabel, err = InitLabel(processLabel)
-		if err != nil {
-			return "", err
+		// Don't override the process label if it was already set.
+		// Otherwise, it should be set container_init_t to run the init process
+		// in a container.
+		if processLabel == "" {
+			processLabel, err = InitLabel(processLabel)
+			if err != nil {
+				return "", err
+			}
 		}
 
 		setupSystemd(specgen.Mounts(), *specgen)
