[fineract] branch develop updated: Add Z, ro flags to Docker Compose Volume

[co...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

conradsp pushed a commit to branch develop
in repository https://gitbox.apache.org/repos/asf/fineract.git


The following commit(s) were added to refs/heads/develop by this push:
     new 70ac081  Add Z,ro flags to Docker Compose Volume
     new 9c9266f  Merge pull request #643 from vorburger/docker-compose-selinux
70ac081 is described below

commit 70ac0819b5882c84a1d5c15eb7cc09051435df39
Author: Michael Vorburger <mi...@vorburger.ch>
AuthorDate: Sat Oct 12 00:28:53 2019 +0200

    Add Z,ro flags to Docker Compose Volume
    
    This is required on secure Linux distributions such as
    Fedora/CentOS/RHEL where SELinux is enabled, where without this
    the mysql container fails to start due to:
    
      ls: cannot open directory '/docker-entrypoint-initdb.d/': Permission denied
    
    These Z,ro volume mount flags are (should be..) harmless and ignored
    by Docker on other platforms, such as insecure ;) Linux distributions
    without SELinux, or Windows and Mac.
    
    PS: I personally don't actually use real Docker, but instead I use Podman
    (see https://github.com/containers/libpod; install via `dnf install podman-docker`)
    and https://github.com/containers/podman-compose/) via `pip3 install podman-compose`;
    it's more secure (because it doesn't need a daemon and root to run containers).
---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 6158808..8c1aadc 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -21,7 +21,7 @@ services:
   fineractmysql:
     image: mysql:5.7
     volumes:
-      - ./fineract-db/docker:/docker-entrypoint-initdb.d
+      - ./fineract-db/docker:/docker-entrypoint-initdb.d:Z,ro
     restart: always
     environment:
       MYSQL_ROOT_PASSWORD: mysql