docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

selinux labels are ignored for bind mounts on services (#5061)

This commit is contained in:
Misty Stanley-Jones 2017-10-20 14:21:36 -07:00 committed by GitHub
parent 04d3ff2e93
commit 4a962afa85
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
engine/admin/volumes/bind-mounts.md
View File

@ -362,6 +362,11 @@ Use **extreme** caution with these options. Bind-mounting a system directory
such as `/home` or `/usr` with the `Z` option will render your host machine
inoperable and you may need to relabel the host machine files by hand.
> **Important**: When using bind mounts with services, selinux labels
> (`:Z` and `:z`), as well as `:ro` are ignored. See
> [moby/moby #32579](https://github.com/moby/moby/issues/32579) for details.
{:.important}
This example sets the `z` option to specify that multiple containers can share
the bind mount's contents: