diff options
| author | OpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com> | 2019-04-29 02:38:14 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2019-04-29 02:38:14 -0700 |
| commit | e0312334cca5d8f5adf9844100f15317a86068d4 (patch) | |
| tree | 2ae5e969ada5731b8379f94e21a447d0170486d2 /docs | |
| parent | fe3acddcbe02cfa258170707791bd096dc909022 (diff) | |
| parent | 3a4be4b66ca22d87446c37218b300b8f31a84b92 (diff) | |
| download | podman-e0312334cca5d8f5adf9844100f15317a86068d4.tar.gz podman-e0312334cca5d8f5adf9844100f15317a86068d4.tar.bz2 podman-e0312334cca5d8f5adf9844100f15317a86068d4.zip | |
Merge pull request #3025 from rhatdan/read-only
Add --read-only-tmpfs options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/podman-create.1.md | 3 | ||||
| -rw-r--r-- | docs/podman-run.1.md | 9 |
2 files changed, 11 insertions, 1 deletions
diff --git a/docs/podman-create.1.md b/docs/podman-create.1.md index f61deebd2..52c965293 100644 --- a/docs/podman-create.1.md +++ b/docs/podman-create.1.md @@ -542,6 +542,9 @@ By default a container will have its root filesystem writable allowing processes to write files anywhere. By specifying the `--read-only` flag the container will have its root filesystem mounted as read only prohibiting any writes. +**--read-only-tmpfs**=*true*|*false* +If container is running in --read-only mode, then mount a read-write tmpfs on /run, /tmp, and /var/tmp. The default is *true* + **--restart=""** Not implemented. diff --git a/docs/podman-run.1.md b/docs/podman-run.1.md index 5a311980f..e54e5e691 100644 --- a/docs/podman-run.1.md +++ b/docs/podman-run.1.md @@ -534,6 +534,9 @@ By default a container will have its root filesystem writable allowing processes to write files anywhere. By specifying the `--read-only` flag the container will have its root filesystem mounted as read only prohibiting any writes. +**--read-only-tmpfs**=*true*|*false* +If container is running in --read-only mode, then mount a read-write tmpfs on /run, /tmp, and /var/tmp. The default is *true* + **--restart=""** Not implemented. @@ -905,7 +908,11 @@ still need to write temporary data. The best way to handle this is to mount tmpfs directories on /run and /tmp. ``` -$ podman run --read-only --tmpfs /run --tmpfs /tmp -i -t fedora /bin/bash +$ podman run --read-only -i -t fedora /bin/bash +``` + +``` +$ podman run --read-only --read-only-tmpfs=false --tmpfs /run -i -t fedora /bin/bash ``` ### Exposing log messages from the container to the host's log |