So what should be the default minimal addition to .devcontainer/devcontainer.json
file to make Podman run on SELinux ?
So far I’ve seen 3 versions (excluding the :Z
variant which, as you said, is basically cheating), but I don’t know which is the best, and what some options really does and why do they work
-
"runArgs": [ "--userns=keep-id" ], "containerEnv": { "HOME": "/home/node" }
-
universal blue - devcontainer setup
"runArgs": [ "--userns=keep-id:uid=1000,gid=1000" ], "containerUser": "vscode", "updateRemoteUserUID": true, "containerEnv": { "HOME": "/home/vscode" },
-
universal blue - podman support
"runArgs": [ "--userns=keep-id", "--security-opt=label=disable" ], "containerEnv": { "HOME": "/home/vscode" },