diff options
| author | Daniel J Walsh <dwalsh@redhat.com> | 2020-10-29 13:31:55 -0400 |
|---|---|---|
| committer | Daniel J Walsh <dwalsh@redhat.com> | 2020-11-02 07:19:12 -0500 |
| commit | 3ee44d942ed9ed8f0b5e0ad1f1949d4b8ffa95f9 (patch) | |
| tree | 9f2043578fda18fc042a71bfc100e184b314fa19 /libpod/container_internal_linux.go | |
| parent | 2aaa036f560e2c42ebb033869eeef539dbc47fef (diff) | |
| download | podman-3ee44d942ed9ed8f0b5e0ad1f1949d4b8ffa95f9.tar.gz podman-3ee44d942ed9ed8f0b5e0ad1f1949d4b8ffa95f9.tar.bz2 podman-3ee44d942ed9ed8f0b5e0ad1f1949d4b8ffa95f9.zip | |
Add better support for unbindable volume mounts
Allow users to specify unbindable on volume command line
Switch internal mounts to rprivate to help prevent leaks.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Diffstat (limited to 'libpod/container_internal_linux.go')
| -rw-r--r-- | libpod/container_internal_linux.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libpod/container_internal_linux.go b/libpod/container_internal_linux.go index bf74ca954..83d5c20cb 100644 --- a/libpod/container_internal_linux.go +++ b/libpod/container_internal_linux.go @@ -344,7 +344,7 @@ func (c *Container) generateSpec(ctx context.Context) (*spec.Spec, error) { Type: "bind", Source: srcPath, Destination: dstPath, - Options: []string{"bind", "private"}, + Options: []string{"bind", "rprivate"}, } if c.IsReadOnly() && dstPath != "/dev/shm" { newMount.Options = append(newMount.Options, "ro", "nosuid", "noexec", "nodev") |