diff --git a/pkg/cluster/spec/instance.go b/pkg/cluster/spec/instance.go
index 3f05dc0ae1..bc15455c4e 100644
--- a/pkg/cluster/spec/instance.go
+++ b/pkg/cluster/spec/instance.go
@@ -231,7 +231,7 @@ func (i *BaseInstance) InitConfig(ctx context.Context, e ctxt.Executor, opt Glob
 	// - We don't support SELinux in Enforcing mode
 	// - restorecon might not be available (Ubuntu doesn't install SELinux tools by default)
 	cmd = fmt.Sprintf("restorecon %s%s-%d.service", systemdDir, comp, port)
-	e.Execute(ctx, cmd, sudo)
+	e.Execute(ctx, cmd, sudo) //nolint
 
 	// doesn't work
 	if _, err := i.setTLSConfig(ctx, false, nil, paths); err != nil {
diff --git a/pkg/cluster/spec/tispark.go b/pkg/cluster/spec/tispark.go
index 6b0584d827..bd5888d4cd 100644
--- a/pkg/cluster/spec/tispark.go
+++ b/pkg/cluster/spec/tispark.go
@@ -274,7 +274,7 @@ func (i *TiSparkMasterInstance) InitConfig(
 	// - We don't support SELinux in Enforcing mode
 	// - restorecon might not be available (Ubuntu doesn't install SELinux tools by default)
 	cmd = fmt.Sprintf("restorecon %s%s-%d.service", systemdDir, comp, port)
-	e.Execute(ctx, cmd, sudo)
+	e.Execute(ctx, cmd, sudo) //nolint
 
 	// transfer default config
 	pdList := topo.GetPDList()
diff --git a/pkg/cluster/task/monitored_config.go b/pkg/cluster/task/monitored_config.go
index 64ef1e2b73..6c644e32e5 100644
--- a/pkg/cluster/task/monitored_config.go
+++ b/pkg/cluster/task/monitored_config.go
@@ -146,7 +146,7 @@ func (m *MonitoredConfig) syncMonitoredSystemConfig(ctx context.Context, exec ct
 	// - We don't support SELinux in Enforcing mode
 	// - restorecon might not be available (Ubuntu doesn't install SELinux tools by default)
 	cmd := fmt.Sprintf("restorecon %s%s-%d.service", systemdDir, comp, port)
-	exec.Execute(ctx, cmd, sudo)
+	exec.Execute(ctx, cmd, sudo) //nolint
 
 	return nil
 }