test: Fix test failure

1. Fix variable issue in test-bound-storage
2. Fix permission issue in logically-bound-switch,
   image-pushpull-upgrade, soft-reboot and custom-selinux-policy

Signed-off-by: Xiaofeng Wang <henrywangxf@me.com>

Author: henrywang

tmt/tests/booted/readonly/017-test-bound-storage.nu

@@ -11,7 +11,7 @@ if not (bootc_testlib have_hostexports) {
 bootc status
 let st = bootc status --json | from json
 let is_composefs = ($st.status.booted.composefs? != null)
-if is_composefs {
+if $is_composefs {
     # TODO we don't have imageDigest yet in status
     exit 0
 }
@@ -24,4 +24,4 @@ let digested_imgref = $"($imgref_untagged)@($digest)"
 systemd-run -dqP /bin/env
 podman inspect $digested_imgref
 
-tap ok
+tap ok

tmt/tests/booted/test-custom-selinux-policy.nu

@@ -29,7 +29,7 @@ def initial_build [] {
 RUN mkdir /opt123; echo \"/opt123 /opt\" >> /etc/selinux/targeted/contexts/files/file_contexts.subs_dist
 " | save Dockerfile
     # Build it
-    podman build -t localhost/bootc-derived .
+    podman build --security-opt label=disable -t localhost/bootc-derived .
 
     bootc switch --transport containers-storage localhost/bootc-derived
 

tmt/tests/booted/test-image-pushpull-upgrade.nu

@@ -49,9 +49,9 @@ COPY usr/ /usr/
 RUN echo test content > /usr/share/blah.txt
 " | save Dockerfile
     # Build it
-    podman build -t localhost/bootc-derived .
+    podman build --security-opt label=disable -t localhost/bootc-derived .
     # Just sanity check it
-    let v = podman run --rm localhost/bootc-derived cat /usr/share/blah.txt | str trim
+    let v = podman run --rm --security-opt label=disable localhost/bootc-derived cat /usr/share/blah.txt | str trim
     assert equal $v "test content"
 
     let orig_root_mtime = ls -Dl /ostree/bootc | get modified
@@ -158,7 +158,7 @@ COPY usr/ /usr/
 RUN echo test content2 > /usr/share/blah.txt
 " | save Dockerfile
     # Build it
-    podman build -t localhost/bootc-derived .
+    podman build --security-opt label=disable -t localhost/bootc-derived .
     let booted_digest = $booted.imageDigest
     print $"booted_digest = ($booted_digest)"
     # We should already be fetching updates from container storage

tmt/tests/booted/test-logically-bound-switch.nu

@@ -55,9 +55,9 @@ RUN echo sanity check > /usr/share/bound-image-sanity-check.txt
     }
 
     # Build it
-    podman build -t $name .
+    podman build --security-opt label=disable -t $name .
     # Just sanity check it
-    let v = podman run --rm $name cat /usr/share/bound-image-sanity-check.txt | str trim
+    let v = podman run --security-opt label=disable --rm $name cat /usr/share/bound-image-sanity-check.txt | str trim
     assert equal $v "sanity check"
 }
 

tmt/tests/booted/test-soft-reboot-selinux-policy.nu

@@ -65,7 +65,7 @@ EORUN
 " | save Dockerfile
 
     # Build the derived image
-    podman build --quiet -t localhost/bootc-derived-policy .
+    podman build --quiet --security-opt label=disable -t localhost/bootc-derived-policy .
 
     # Verify soft reboot preparation hasn't happened yet
     assert (not ("/run/nextroot" | path exists))

tmt/tests/booted/test-soft-reboot.nu

@@ -31,7 +31,7 @@ def initial_build [] {
 RUN echo test content > /usr/share/testfile-for-soft-reboot.txt
 " | save Dockerfile
     # Build it
-    podman build -t localhost/bootc-derived .
+    podman build --security-opt label=disable -t localhost/bootc-derived .
 
     assert (not ("/run/nextroot" | path exists))
 
@@ -59,7 +59,7 @@ RUN echo test content > /usr/share/testfile-for-soft-reboot.txt
 RUN echo 'kargs = ["foo1=bar2"]' | tee /usr/lib/bootc/kargs.d/00-foo1bar2.toml > /dev/null
 " | save Dockerfile
     # Build it
-    podman build -t localhost/bootc-derived .
+    podman build --security-opt label=disable -t localhost/bootc-derived .
 
     bootc upgrade --soft-reboot=auto
     let st = bootc status --json | from json

tmt/tests/examples/bootc-bls/build

@@ -10,6 +10,7 @@ cp /usr/lib/bootc/initramfs-setup extra/usr/lib/dracut/modules.d/37bootc/bootc-i
 mkdir -p tmp
 
 podman build \
+    --security-opt label=disable \
     -t quay.io/fedora/fedora-bootc-bls:42 \
     -f Containerfile \
     --iidfile=tmp/iid \