docs: fix container run option for selinux systems

Example code to run in a container didn't work on SELinux systems. Added filesystem labeling flag to the volume bind mount. Change will not affect non-SELinux systems. Also added read-only flag, since conform doesn't need write access. Signed-off-by: Sebastian Yaghoubi <[email protected]> Signed-off-by: Andrey Smirnov <[email protected]>
siderolabs · Dec 23, 2024 · 8078e02 · 8078e02
1 parent fadbbb4
commit 8078e02
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/README.md b/README.md
@@ -44,7 +44,7 @@ go install github.com/siderolabs/conform/cmd/conform@latest
 Third option is to run it as a container:
 
 ```bash
-docker run --rm -it -v $PWD:/src -w /src ghcr.io/siderolabs/conform:v0.1.0-alpha.22 enforce
+docker run --rm -it -v $PWD:/src:ro,Z -w /src ghcr.io/siderolabs/conform:v0.1.0-alpha.22 enforce
 ```
 
 You can also install conform with [aqua](https://aquaproj.github.io/).