erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-08-11 11:25:45 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
spiegel_podman/docs/source/markdown
History
Daniel J Walsh ad8a96ab95
Support running nested SELinux container separation 
Currently Podman prevents SELinux container separation,
when running within a container. This PR adds a new
--security-opt label=nested

When setting this option, Podman unmasks and mountsi
/sys/fs/selinux into the containers making /sys/fs/selinux
fully exposed. Secondly Podman sets the attribute
run.oci.mount_context_type=rootcontext

This attribute tells crun to mount volumes with rootcontext=MOUNTLABEL
as opposed to context=MOUNTLABEL.

With these two settings Podman inside the container is allowed to set
its own SELinux labels on tmpfs file systems mounted into its parents
container, while still being confined by SELinux. Thus you can have
nested SELinux labeling inside of a container.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2023-03-13 14:21:12 -04:00
..
links Install podman-systemd.unit man page, make quadlet discoverable 2023-02-03 08:42:20 -06:00
options Support running nested SELinux container separation 2023-03-13 14:21:12 -04:00
.gitignore Add shared --compress to man pages 2023-01-03 16:39:41 -05:00
podman-attach.1.md.in Clean up more language for inclusiveness 2023-01-27 09:40:27 -05:00
podman-auto-update.1.md.in auto-update: support pods 2023-02-17 10:31:28 +01:00
podman-build.1.md.in docs: context is not optional for build 2023-02-23 09:18:51 +05:30
podman-commit.1.md #17363 Fix contradicting documentation podman-commit 2023-02-07 16:23:07 +01:00
podman-completion.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-container-checkpoint.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-container-cleanup.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-container-clone.1.md.in Merge pull request #15621 from ventifus/fix-manpage-header 2022-09-06 19:26:53 +02:00
podman-container-diff.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-container-exists.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-container-inspect.1.md.in [CI:DOCS] man-page checker: include --format (Go templates) 2023-02-08 15:33:45 -07:00
podman-container-prune.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-container-restore.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-container-runlabel.1.md.in Clean up more language for inclusiveness 2023-01-27 09:40:27 -05:00
podman-container.1.md Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-cp.1.md Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-create.1.md.in Merge pull request #17450 from danishprakash/add-group-entry 2023-02-28 21:59:59 +01:00
podman-diff.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-events.1.md [CI:DOCS] man-page checker: include --format (Go templates) 2023-02-08 15:33:45 -07:00
podman-exec.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-export.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-generate-spec.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-generate-systemd.1.md fix: don't output "ago" when container is currently up and running 2023-01-27 12:32:15 +01:00
podman-generate.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-healthcheck-run.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-healthcheck.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-history.1.md man page --format xref: tighten the autocompletion check 2023-02-14 08:11:54 -07:00
podman-image-diff.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-image-exists.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-image-inspect.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-image-mount.1.md Man page checker: require canonical name in SEE ALSO 2023-01-03 10:24:55 -07:00
podman-image-prune.1.md Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-image-scp.1.md Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-image-sign.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-image-tree.1.md Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-image-trust.1.md.in Unify --noheading and -n to be consistent on all commands 2022-12-19 13:18:43 -05:00
podman-image-unmount.1.md Man page checker: require canonical name in SEE ALSO 2023-01-03 10:24:55 -07:00
podman-image.1.md Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-images.1.md.in [CI:DOCS] man-page checker: include --format (Go templates) 2023-02-08 15:33:45 -07:00
podman-import.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-info.1.md Vendor in latest containers/common with default capabilities 2022-12-15 14:28:30 -05:00
podman-init.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-inspect.1.md.in Vendor in latest containers/common with default capabilities 2022-12-15 14:28:30 -05:00
podman-kill.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-kube-apply.1.md Add podman kube apply command 2022-11-01 15:30:17 -04:00
podman-kube-down.1.md kube play: update the handling of PersistentVolumeClaim 2022-11-08 11:08:50 +02:00
podman-kube-generate.1.md Remove ReservedAnnotations from kube generate specification 2023-01-18 08:46:24 -05:00
podman-kube-play.1.md.in play kube: Add --wait option 2023-02-28 13:45:36 -05:00
podman-kube.1.md Add podman kube apply command 2022-11-01 15:30:17 -04:00
podman-load.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-login.1.md.in Man pages: refactor common options: --tls-verify 2022-09-13 11:15:23 -06:00
podman-logout.1.md.in Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-logs.1.md.in Man page checker: require canonical name in SEE ALSO 2023-01-03 10:24:55 -07:00
podman-machine-info.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-machine-init.1.md Make qemu security model none 2022-12-14 15:35:30 -05:00
podman-machine-inspect.1.md Introduce podman machine os apply 2023-02-15 14:48:12 -05:00
podman-machine-list.1.md.in man page --format xref: tighten the autocompletion check 2023-02-14 08:11:54 -07:00
podman-machine-os-apply.1.md Introduce podman machine os apply 2023-02-15 14:48:12 -05:00
podman-machine-os.1.md Introduce podman machine os apply 2023-02-15 14:48:12 -05:00
podman-machine-rm.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-machine-set.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-machine-ssh.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-machine-start.1.md Add --quiet and --no-info flags to podman machine start 2022-11-11 16:14:20 -05:00
podman-machine-stop.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-machine.1.md Introduce podman machine os apply 2023-02-15 14:48:12 -05:00
podman-manifest-add.1.md.in Man pages: refactor common options: --annotation (manifest) 2022-10-12 08:54:04 -06:00
podman-manifest-annotate.1.md.in Man pages: refactor common options: --annotation (manifest) 2022-10-12 08:54:04 -06:00
podman-manifest-create.1.md.in Man pages: refactor common options: --tls-verify 2022-09-13 11:15:23 -06:00
podman-manifest-exists.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-manifest-inspect.1.md.in Add --insecure,--tls-verify,--verbose flags to podman manifest inspect 2022-11-03 08:00:15 -04:00
podman-manifest-push.1.md.in Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml) 2023-01-27 16:47:32 +01:00
podman-manifest-remove.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-manifest-rm.1.md Add links to all SEE ALSO sections 2021-11-10 09:29:21 -05:00
podman-manifest.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-mount.1.md.in [CI:DOCS] podman-mount: s/umount/unmount/ 2022-12-15 12:30:40 +01:00
podman-network-connect.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-network-create.1.md Doc update for docker network options via CLI 2023-02-21 21:48:17 +05:30
podman-network-disconnect.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-network-exists.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-network-inspect.1.md man page --format xref: tighten the autocompletion check 2023-02-14 08:11:54 -07:00
podman-network-ls.1.md.in man page --format xref: tighten the autocompletion check 2023-02-14 08:11:54 -07:00
podman-network-prune.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-network-reload.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-network-rm.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-network-update.1.md network: add support for podman network update and --network-dns-server 2023-01-12 20:19:14 +05:30
podman-network.1.md man page xref: validate displayed man page names 2023-02-13 07:54:57 -07:00
podman-pause.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-pod-clone.1.md.in add support for limiting tmpfs size for systemd-specific mnts 2023-02-14 14:56:09 +05:30
podman-pod-create.1.md.in add support for limiting tmpfs size for systemd-specific mnts 2023-02-14 14:56:09 +05:30
podman-pod-exists.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-pod-inspect.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-pod-kill.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-pod-logs.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-pod-pause.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-pod-prune.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-pod-ps.1.md.in [CI:DOCS] man-page checker: include --format (Go templates) 2023-02-08 15:33:45 -07:00
podman-pod-restart.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-pod-rm.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-pod-start.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-pod-stats.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-pod-stop.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-pod-top.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-pod-unpause.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-pod.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-port.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-ps.1.md [CI:DOCS] man-page checker: include --format (Go templates) 2023-02-08 15:33:45 -07:00
podman-pull.1.md.in Adding encryption decryption feature 2022-11-24 04:53:59 -05:00
podman-push.1.md.in Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml) 2023-01-27 16:47:32 +01:00
podman-remote.1.md Update docs/source/markdown/podman-remote.1.md 2022-11-17 19:45:11 -05:00
podman-rename.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-restart.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-rm.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-rmi.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-run.1.md.in Merge pull request #17450 from danishprakash/add-group-entry 2023-02-28 21:59:59 +01:00
podman-save.1.md.in Add shared --compress to man pages 2023-01-03 16:39:41 -05:00
podman-search.1.md.in man page --format xref: tighten the autocompletion check 2023-02-14 08:11:54 -07:00
podman-secret-create.1.md Add labels to secrets 2022-09-20 16:28:00 -04:00
podman-secret-inspect.1.md [CI:DOCS] man-page checker: include --format (Go templates) 2023-02-08 15:33:45 -07:00
podman-secret-ls.1.md.in Unify --noheading and -n to be consistent on all commands 2022-12-19 13:18:43 -05:00
podman-secret-rm.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-secret.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-start.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-stats.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-stop.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-system-connection-add.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-system-connection-default.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-system-connection-list.1.md man page --format xref: tighten the autocompletion check 2023-02-14 08:11:54 -07:00
podman-system-connection-remove.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-system-connection-rename.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-system-connection.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-system-df.1.md Fix system df issues with -f and -v 2022-10-20 23:12:09 -04:00
podman-system-migrate.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-system-prune.1.md Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-system-renumber.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-system-reset.1.md Merge pull request #15634 from bbalp/update-system-reset-warning-message 2022-09-07 12:04:12 +02:00
podman-system-service.1.md Clean up more language for inclusiveness 2023-01-27 09:40:27 -05:00
podman-system.1.md man page xref: validate displayed man page names 2023-02-13 07:54:57 -07:00
podman-systemd.unit.5.md Quadlet: add support for setting --ip and --ip6 2023-03-06 18:36:41 -07:00
podman-tag.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-top.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-unmount.1.md.in Man page checker: require canonical name in SEE ALSO 2023-01-03 10:24:55 -07:00
podman-unpause.1.md.in Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-unshare.1.md [CI:DOCS] Add CNI deprecation notices to documentation 2023-01-19 08:09:32 -06:00
podman-untag.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-update.1.md.in Fixed podman update --pids-limit 2022-12-31 18:42:47 -05:00
podman-version.1.md [CI:DOCS] man pages: document some --format options 2022-09-15 09:59:32 -06:00
podman-volume-create.1.md [CI:DOCS] Cleanup some man pages to display options with line breaks 2023-02-08 14:46:44 -05:00
podman-volume-exists.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-volume-export.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-volume-import.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-volume-inspect.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-volume-ls.1.md.in Unify --noheading and -n to be consistent on all commands 2022-12-19 13:18:43 -05:00
podman-volume-mount.1.md Remove 'you' from man pages 2022-12-07 09:29:29 -05:00
podman-volume-prune.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-volume-reload.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-volume-rm.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-volume-unmount.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-volume.1.md Fix manpage headers 2022-09-06 09:37:13 -07:00
podman-wait.1.md.in wait: add --ignore option 2022-12-16 10:24:29 +01:00
podman.1.md Remove --namespace flag from Podman root 2023-02-22 11:00:50 -05:00