opensource/podman
1
0
Fork 0
mirror of https://github.com/containers/podman.git synced 2025-05-22 01:27:07 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
podman/docs/source/markdown
History
Daniel J Walsh ad8a96ab95 Support running nested SELinux container separation 
Currently Podman prevents SELinux container separation,
when running within a container. This PR adds a new
--security-opt label=nested

When setting this option, Podman unmasks and mountsi
/sys/fs/selinux into the containers making /sys/fs/selinux
fully exposed. Secondly Podman sets the attribute
run.oci.mount_context_type=rootcontext

This attribute tells crun to mount volumes with rootcontext=MOUNTLABEL
as opposed to context=MOUNTLABEL.

With these two settings Podman inside the container is allowed to set
its own SELinux labels on tmpfs file systems mounted into its parents
container, while still being confined by SELinux. Thus you can have
nested SELinux labeling inside of a container.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2023-03-13 14:21:12 -04:00
..
links
Install podman-systemd.unit man page, make quadlet discoverable
2023-02-03 08:42:20 -06:00
options
Support running nested SELinux container separation
2023-03-13 14:21:12 -04:00
.gitignore
Add shared --compress to man pages
2023-01-03 16:39:41 -05:00
podman-attach.1.md.in
Clean up more language for inclusiveness
2023-01-27 09:40:27 -05:00
podman-auto-update.1.md.in
auto-update: support pods
2023-02-17 10:31:28 +01:00
podman-build.1.md.in
docs: context is not optional for build
2023-02-23 09:18:51 +05:30
podman-commit.1.md
#17363 Fix contradicting documentation podman-commit
2023-02-07 16:23:07 +01:00
podman-completion.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-container-checkpoint.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-container-cleanup.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-container-clone.1.md.in
Merge pull request #15621 from ventifus/fix-manpage-header
2022-09-06 19:26:53 +02:00
podman-container-diff.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-container-exists.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-container-inspect.1.md.in
[CI:DOCS] man-page checker: include --format (Go templates)
2023-02-08 15:33:45 -07:00
podman-container-prune.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-container-restore.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-container-runlabel.1.md.in
Clean up more language for inclusiveness
2023-01-27 09:40:27 -05:00
podman-container.1.md
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-cp.1.md
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-create.1.md.in
Merge pull request #17450 from danishprakash/add-group-entry
2023-02-28 21:59:59 +01:00
podman-diff.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-events.1.md
[CI:DOCS] man-page checker: include --format (Go templates)
2023-02-08 15:33:45 -07:00
podman-exec.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-export.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-generate-spec.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-generate-systemd.1.md
fix: don't output "ago" when container is currently up and running
2023-01-27 12:32:15 +01:00
podman-generate.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-healthcheck-run.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-healthcheck.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-history.1.md
man page --format xref: tighten the autocompletion check
2023-02-14 08:11:54 -07:00
podman-image-diff.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-image-exists.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-image-inspect.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-image-mount.1.md
Man page checker: require canonical name in SEE ALSO
2023-01-03 10:24:55 -07:00
podman-image-prune.1.md
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-image-scp.1.md
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-image-sign.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-image-tree.1.md
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-image-trust.1.md.in
Unify --noheading and -n to be consistent on all commands
2022-12-19 13:18:43 -05:00
podman-image-unmount.1.md
Man page checker: require canonical name in SEE ALSO
2023-01-03 10:24:55 -07:00
podman-image.1.md
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-images.1.md.in
[CI:DOCS] man-page checker: include --format (Go templates)
2023-02-08 15:33:45 -07:00
podman-import.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-info.1.md
Vendor in latest containers/common with default capabilities
2022-12-15 14:28:30 -05:00
podman-init.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-inspect.1.md.in
Vendor in latest containers/common with default capabilities
2022-12-15 14:28:30 -05:00
podman-kill.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-kube-apply.1.md
Add podman kube apply command
2022-11-01 15:30:17 -04:00
podman-kube-down.1.md
kube play: update the handling of PersistentVolumeClaim
2022-11-08 11:08:50 +02:00
podman-kube-generate.1.md
Remove ReservedAnnotations from kube generate specification
2023-01-18 08:46:24 -05:00
podman-kube-play.1.md.in
play kube: Add --wait option
2023-02-28 13:45:36 -05:00
podman-kube.1.md
Add podman kube apply command
2022-11-01 15:30:17 -04:00
podman-load.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-login.1.md.in
Man pages: refactor common options: --tls-verify
2022-09-13 11:15:23 -06:00
podman-logout.1.md.in
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-logs.1.md.in
Man page checker: require canonical name in SEE ALSO
2023-01-03 10:24:55 -07:00
podman-machine-info.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-machine-init.1.md
Make qemu security model none
2022-12-14 15:35:30 -05:00
podman-machine-inspect.1.md
Introduce podman machine os apply
2023-02-15 14:48:12 -05:00
podman-machine-list.1.md.in
man page --format xref: tighten the autocompletion check
2023-02-14 08:11:54 -07:00
podman-machine-os-apply.1.md
Introduce podman machine os apply
2023-02-15 14:48:12 -05:00
podman-machine-os.1.md
Introduce podman machine os apply
2023-02-15 14:48:12 -05:00
podman-machine-rm.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-machine-set.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-machine-ssh.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-machine-start.1.md
Add --quiet and --no-info flags to podman machine start
2022-11-11 16:14:20 -05:00
podman-machine-stop.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-machine.1.md
Introduce podman machine os apply
2023-02-15 14:48:12 -05:00
podman-manifest-add.1.md.in
Man pages: refactor common options: --annotation (manifest)
2022-10-12 08:54:04 -06:00
podman-manifest-annotate.1.md.in
Man pages: refactor common options: --annotation (manifest)
2022-10-12 08:54:04 -06:00
podman-manifest-create.1.md.in
Man pages: refactor common options: --tls-verify
2022-09-13 11:15:23 -06:00
podman-manifest-exists.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-manifest-inspect.1.md.in
Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
2022-11-03 08:00:15 -04:00
podman-manifest-push.1.md.in
Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
2023-01-27 16:47:32 +01:00
podman-manifest-remove.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-manifest-rm.1.md
Add links to all SEE ALSO sections
2021-11-10 09:29:21 -05:00
podman-manifest.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-mount.1.md.in
[CI:DOCS] podman-mount: s/umount/unmount/
2022-12-15 12:30:40 +01:00
podman-network-connect.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-network-create.1.md
Doc update for docker network options via CLI
2023-02-21 21:48:17 +05:30
podman-network-disconnect.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-network-exists.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-network-inspect.1.md
man page --format xref: tighten the autocompletion check
2023-02-14 08:11:54 -07:00
podman-network-ls.1.md.in
man page --format xref: tighten the autocompletion check
2023-02-14 08:11:54 -07:00
podman-network-prune.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-network-reload.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-network-rm.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-network-update.1.md
network: add support for podman network update and --network-dns-server
2023-01-12 20:19:14 +05:30
podman-network.1.md
man page xref: validate displayed man page names
2023-02-13 07:54:57 -07:00
podman-pause.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-pod-clone.1.md.in
add support for limiting tmpfs size for systemd-specific mnts
2023-02-14 14:56:09 +05:30
podman-pod-create.1.md.in
add support for limiting tmpfs size for systemd-specific mnts
2023-02-14 14:56:09 +05:30
podman-pod-exists.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-pod-inspect.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-pod-kill.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-pod-logs.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-pod-pause.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-pod-prune.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-pod-ps.1.md.in
[CI:DOCS] man-page checker: include --format (Go templates)
2023-02-08 15:33:45 -07:00
podman-pod-restart.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-pod-rm.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-pod-start.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-pod-stats.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-pod-stop.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-pod-top.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-pod-unpause.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-pod.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-port.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-ps.1.md
[CI:DOCS] man-page checker: include --format (Go templates)
2023-02-08 15:33:45 -07:00
podman-pull.1.md.in
Adding encryption decryption feature
2022-11-24 04:53:59 -05:00
podman-push.1.md.in
Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
2023-01-27 16:47:32 +01:00
podman-remote.1.md
Update docs/source/markdown/podman-remote.1.md
2022-11-17 19:45:11 -05:00
podman-rename.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-restart.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-rm.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-rmi.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-run.1.md.in
Merge pull request #17450 from danishprakash/add-group-entry
2023-02-28 21:59:59 +01:00
podman-save.1.md.in
Add shared --compress to man pages
2023-01-03 16:39:41 -05:00
podman-search.1.md.in
man page --format xref: tighten the autocompletion check
2023-02-14 08:11:54 -07:00
podman-secret-create.1.md
Add labels to secrets
2022-09-20 16:28:00 -04:00
podman-secret-inspect.1.md
[CI:DOCS] man-page checker: include --format (Go templates)
2023-02-08 15:33:45 -07:00
podman-secret-ls.1.md.in
Unify --noheading and -n to be consistent on all commands
2022-12-19 13:18:43 -05:00
podman-secret-rm.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-secret.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-start.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-stats.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-stop.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-system-connection-add.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-system-connection-default.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-system-connection-list.1.md
man page --format xref: tighten the autocompletion check
2023-02-14 08:11:54 -07:00
podman-system-connection-remove.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-system-connection-rename.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-system-connection.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-system-df.1.md
Fix system df issues with -f and -v
2022-10-20 23:12:09 -04:00
podman-system-migrate.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-system-prune.1.md
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-system-renumber.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-system-reset.1.md
Merge pull request #15634 from bbalp/update-system-reset-warning-message
2022-09-07 12:04:12 +02:00
podman-system-service.1.md
Clean up more language for inclusiveness
2023-01-27 09:40:27 -05:00
podman-system.1.md
man page xref: validate displayed man page names
2023-02-13 07:54:57 -07:00
podman-systemd.unit.5.md
Quadlet: add support for setting --ip and --ip6
2023-03-06 18:36:41 -07:00
podman-tag.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-top.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-unmount.1.md.in
Man page checker: require canonical name in SEE ALSO
2023-01-03 10:24:55 -07:00
podman-unpause.1.md.in
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-unshare.1.md
[CI:DOCS] Add CNI deprecation notices to documentation
2023-01-19 08:09:32 -06:00
podman-untag.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-update.1.md.in
Fixed podman update --pids-limit
2022-12-31 18:42:47 -05:00
podman-version.1.md
[CI:DOCS] man pages: document some --format options
2022-09-15 09:59:32 -06:00
podman-volume-create.1.md
[CI:DOCS] Cleanup some man pages to display options with line breaks
2023-02-08 14:46:44 -05:00
podman-volume-exists.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-volume-export.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-volume-import.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-volume-inspect.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-volume-ls.1.md.in
Unify --noheading and -n to be consistent on all commands
2022-12-19 13:18:43 -05:00
podman-volume-mount.1.md
Remove 'you' from man pages
2022-12-07 09:29:29 -05:00
podman-volume-prune.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-volume-reload.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-volume-rm.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-volume-unmount.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-volume.1.md
Fix manpage headers
2022-09-06 09:37:13 -07:00
podman-wait.1.md.in
wait: add --ignore option
2022-12-16 10:24:29 +01:00
podman.1.md
Remove --namespace flag from Podman root
2023-02-22 11:00:50 -05:00