Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support --tmpfs mount #83

Open
mikosa opened this issue Dec 16, 2020 · 2 comments
Open

Support --tmpfs mount #83

mikosa opened this issue Dec 16, 2020 · 2 comments
Labels
question Further information is requested

Comments

@mikosa
Copy link

mikosa commented Dec 16, 2020

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is.

In some cases u need to mount tmpfs for security reasons and for other reasons.
so for example u may need to run the following:

podman run -e MYSQL_ROOT_PASSWORD=my-secret-pw --tmpfs /run -d mysql

Describe the solution you'd like
udica is not allowing this in the created configuration

Describe alternatives you've considered
Not sure if there is a policy i can add. I dont know SElinux. If u have an alternative solution, I would appreciate it too :)

@wrabcak
Copy link
Member

wrabcak commented Dec 17, 2020

Hi @mikosa ,
Can you please share the SELinux denials? Do you see any troubles with SELinux when you started container as you defined in the issue description?

Thanks,
Lukas.

@vmojzis vmojzis added the question Further information is requested label Jul 16, 2021
@vmojzis
Copy link
Collaborator

vmojzis commented Apr 29, 2022

Hi @mikosa,
could you please specify what issues are you running into (the container won't start at all, you can't access the tmpfs mount, ...)?
Also please share any AVC messages you are seeing related to this use case as well as the podman inspect file.
Thank you.
Vit

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

3 participants