containers
/
automation-tests
mirror of https://github.com/containers/automation-tests.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #23667 from rhatdan/man 

[ci:docs] Fix description of :Z to talk about pods
This commit is contained in:
openshift-merge-bot[bot] 2024-08-27 09:43:43 +00:00 committed by GitHub
parent 9892feedd9 1d5bdce3d9
commit 39f9d4ecae
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
docs/source/markdown/options/volume.md
View File

@ -81,12 +81,15 @@ objects on the shared volumes. The **z** option tells Podman that two or more
content with a shared content label. Shared volume labels allow all containers content with a shared content label. Shared volume labels allow all containers
to read/write content. The **Z** option tells Podman to label the content with to read/write content. The **Z** option tells Podman to label the content with
a private unshared label Only the current <<container|pod>> can use a private a private unshared label Only the current <<container|pod>> can use a private
volume. Relabeling walks the file system under the volume and changes the label volume. Note: all containers within a `pod` share the same SELinux label. This
on each file, if the volume has thousands of inodes, this process takes a means all containers within said pod can read/write volumes shared into the
long time, delaying the start of the <<container|pod>>. If the volume container created with the `:Z` on any of one the containers. Relabeling walks
was previously relabeled with the `z` option, Podman is optimized to not relabel the file system under the volume and changes the label on each file, if the
a second time. If files are moved into the volume, then the labels can be volume has thousands of inodes, this process takes a long time, delaying the
manually change with the `chcon -Rt container_file_t PATH` command. start of the <<container|pod>>. If the volume was previously relabeled with the
`z` option, Podman is optimized to not relabel a second time. If files are
moved into the volume, then the labels can be manually change with the
`chcon -Rt container_file_t PATH` command.
Note: Do not relabel system files and directories. Relabeling system content Note: Do not relabel system files and directories. Relabeling system content
might cause other confined services on the machine to fail. For these types might cause other confined services on the machine to fail. For these types