https://github.com/docker/docker/pull/16452 This patch will allow you to run your docker containers with SELinux locked down. Prior to this you needed to disable SELinux in docker (Not on the host). The patch is doing a little bit of nastiness in that it is recursively relabeling the image on container creation. You could see a slow down on image creation of 1-2 seconds. After the container is created, there is no slow down in start and stop of the container. We would prefer to eventually get the kernel fixed to allow built in btrfs labeling but this at least allows us to fix this in userspace. Now we need to fix overlayfs. Dan _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
