pass flag required with podman and selinux

glehmann · gduperrey · tescande · glehmann · commit 2fd633617b77 · 2025-08-01T15:06:41.000+02:00
--security-opt label=disable is more performant that using :Z at the end
of the mount option.

Signed-off-by: Gaëtan Lehmann &lt;gaetan.lehmann@vates.tech&gt;
Co-authored-by: Gael Duperrey &lt;gduperrey@vates.tech&gt;
Co-authored-by: Thierry Escande &lt;thierry.escande@vates.tech&gt;
diff --git a/run.py b/run.py
@@ -106,7 +106,7 @@ def main():
                    "--platform", docker_arch,
                    ]
     if is_podman(RUNNER):
-        docker_args += ["--userns=keep-id"]
+        docker_args += ["--userns=keep-id", "--security-opt", "label=disable"]
     if args.rm:
         docker_args += ["--rm=true"]
 

Original file line number	Diff line number	Diff line change
`@@ -106,7 +106,7 @@ def main():`
`106`	`106`	`"--platform", docker_arch,`
`107`	`107`	`]`
`108`	`108`	`if is_podman(RUNNER):`
`109`		`- docker_args += ["--userns=keep-id"]`
	`109`	`+ docker_args += ["--userns=keep-id", "--security-opt", "label=disable"]`
`110`	`110`	`if args.rm:`
`111`	`111`	`docker_args += ["--rm=true"]`
`112`	`112`