From d5cd3887296cd71216666e8e6bb6457340c08074 Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Mon, 19 Aug 2024 09:44:40 -0400 Subject: [PATCH] Fix description of :Z to talk about pods Fixes: 23329 Signed-off-by: Daniel J Walsh --- docs/source/markdown/options/volume.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/source/markdown/options/volume.md b/docs/source/markdown/options/volume.md index 116ed4c078..b4f64de59e 100644 --- a/docs/source/markdown/options/volume.md +++ b/docs/source/markdown/options/volume.md @@ -81,7 +81,9 @@ objects on the shared volumes. The **z** option tells Podman that two or more content with a shared content label. Shared volume labels allow all containers to read/write content. The **Z** option tells Podman to label the content with a private unshared label Only the current <> can use a private -volume. Relabeling walks the file system under the volume and changes the label +volume. Note: all containers within a `pod` share the same SELinux label. This +means all containers within said pod can read/write volumes create with the +`:Z`. Relabeling walks the file system under the volume and changes the label on each file, if the volume has thousands of inodes, this process takes a long time, delaying the start of the <>. If the volume was previously relabeled with the `z` option, Podman is optimized to not relabel