diff options
| author | Matthew Heon <matthew.heon@gmail.com> | 2018-09-13 15:00:58 -0400 |
|---|---|---|
| committer | Atomic Bot <atomic-devel@projectatomic.io> | 2018-09-13 21:35:44 +0000 |
| commit | e2137cd009376af0f66855221bd2605bd3297104 (patch) | |
| tree | d34f45bd306d65c6cfec122a17797fd711564375 /pkg/secrets | |
| parent | f0a3a4329ecaaadd60331641712d5e9b35e1120f (diff) | |
| download | podman-e2137cd009376af0f66855221bd2605bd3297104.tar.gz podman-e2137cd009376af0f66855221bd2605bd3297104.tar.bz2 podman-e2137cd009376af0f66855221bd2605bd3297104.zip | |
Swap default mount propagation from private to rprivate
This matches Docker behavior more closely and should resolve an
issue we were seeing with /sys mounts
Signed-off-by: Matthew Heon <matthew.heon@gmail.com>
Closes: #1465
Approved by: rhatdan
Diffstat (limited to 'pkg/secrets')
| -rw-r--r-- | pkg/secrets/secrets.go | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/pkg/secrets/secrets.go b/pkg/secrets/secrets.go index be5642eba..7208f53b7 100644 --- a/pkg/secrets/secrets.go +++ b/pkg/secrets/secrets.go @@ -243,7 +243,7 @@ func addSecretsFromMountsFile(filePath, mountLabel, containerWorkingDir, mountPr Source: filepath.Join(mountPrefix, ctrDir), Destination: ctrDir, Type: "bind", - Options: []string{"bind", "private"}, + Options: []string{"bind", "rprivate"}, } mounts = append(mounts, m) @@ -278,7 +278,7 @@ func addFIPSModeSecret(mounts *[]rspec.Mount, containerWorkingDir string) error Source: ctrDirOnHost, Destination: secretsDir, Type: "bind", - Options: []string{"bind", "private"}, + Options: []string{"bind", "rprivate"}, } *mounts = append(*mounts, m) } |