Feature: Document SELinux bind-mount note for local devcontainer usage
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 68/100
- Issue type
- Documentation
- Clarity
- Mostly clear
- Activity status
- Quiet
- Tech stack
- docker
- Domain
- devops, documentation
Research direction
Search the local Docker/devcontainer documentation for the bind-mount usage shown in the issue. Add a short note for SELinux-enabled Linux hosts using the :Z bind-mount form, and mention the label-disable workaround if appropriate. Done means the documentation explains why the plain mount can fail and shows a working command.
Written by the indexing model from the issue text.
Description
Describe the enhancement or feature you would like
When using the CPython devcontainer image on SELinux-enabled Linux hosts, a plain bind mount may fail with Permission denied inside the container.
Example:
docker run -it --rm \
-v "$PWD:/workspace" \
-w /workspace \
ghcr.io/python/devcontainer:latest
In that case, a SELinux-compatible bind mount works:
docker run -it --rm \
-v "$PWD:/workspace:Z" \
-w /workspace \
ghcr.io/python/devcontainer:latest
Without relabeling, /workspace may not be readable from inside the container.
It may be helpful to add a short note to the local Docker/devcontainer documentation for SELinux-enabled hosts, preferably using the :Z bind-mount form.
Describe alternatives you have considered
As an alternative workaround, this also works:
docker run -it --rm \
--security-opt label=disable \
-v "$PWD:/workspace" \
-w /workspace \
ghcr.io/python/devcontainer:latest
Additional context
No response
- Dominant language
- Python
- Stars
- 2.1k
- Forks
- 1k
- Avg merge
- 2d 12h
- Merged PRs (30d)
- 12
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from python/devguide
-
type-feature
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
topic-building python type-feature
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
-
needs: decision topic-test type-bug
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
topic-dev process type-feature
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
-
type-feature
Difficulty 3/5 1-2 days Newbie friendliness 68/100
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
syfoud/Simulated_Scepter#172 ·
-
A cancelled tests run makes the coverage comment workflow fail and reports it as a red check on main Openarea: ci bug perceived difficulty: 3
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Nitjsefnie-Harness-Commons/daedalus#921 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
EleutherAI/lm-evaluation-harness#4207 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 92/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
ClickHouse/clickhouse-connect#1057 ·