3 ms·
SELinux has good errors and all I usually need is :z and :Z on mounts
by ThatMedicIsASpy 1y ago
SELinux has good errors and all I usually need is :z and :Z on mounts
- gm678 1y agoCan confirm, have been doing exactly what GP says is a world of pain with no problems as soon as I learned what `:z` and `:Z` do and why they might be needed. A good reference answer: https://unix.stackexchange.com/questions/651198/podman-volume-mounts-when-to-use-the-z-or-z-suffix https://unix.stackexchange.com/questions/651198/podman-volum... TL;DR: lowercase if a file from the host is shared with a container or a volume is shared between multiple containers. Uppercase in the same scenario if you want the container to take an exclusive lock on the volumes/files (very unlikely).
- zelphirkalt 1y agoHow do I make it :ro then? For example it is a good practice to mount config files as readonly. But if I have to use :z, I think I cannot use :ro?
- gausswho 1y ago:ro,z
- zelphirkalt 1y agoAh, I never knew this is possible. Thank you!